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Can  the 


Anything  can  happen  to  your  infrastructure.  Make  sure  it  scales.  Today’s  business  world 

is  a  roller  coaster  ride  of  ups,  downs,  and  complete  unknowns,  and  the  companies  that  adapt  to  this  climate  are  the 
companies  that  will  thrive.  In  this  kind  of  environment,  where _ can  happen  at  any  moment,  it  is  increasingly 


important  that  your  infrastructure  provides  the  headroom  and  ability  to  increase  or  decrease  capacity  as  necessary 
almost  instantly.  Here’s  how  the  Microsoft®  platform  can  help  you  get  there: 


Scalability  world  records  and 
price-performance  leadership 


The  Windows  Server  family  holds  the  world 
performance  records  in  the  TPC-C  and  TPC-W 
benchmarks,  which  measure  transactions 
per  minute,  and  Web  interactions  processed 
per  second,  respectively.  In  TPC-C  price- 
performance  benchmarks  of  clustered  solutions, 
Microsoft  has  the  top  four  results,  and  six  of 
the  top  ten.  In  tests  of  non-clustered  systems, 
Microsoft  solutions  earned  the  top  ten  spots  in 
price-performance.  In  a  head-to-head  comparison 
of  the  best  non-clustered  results  on  Windows 
Server/SQL  Server  2000  Enterprise  Edition 
and  the  best  Sun  Microsystems  result,  the 
Microsoft  solution  topped  Sun  in  performance 
by  360  percent,  at  a  cost-per-transaction 
that  is  42  percent  lower!1 


Scaling  up:  Getting  the  superior 
performance  you  need 


Today,  many  companies  have  accumulated  large 
quantities  of  servers,  due  to  new  applications, 
growing  data  requirements,  and  through  mergers 
and  acquisitions.  Consolidating  these  large 
numbers  of  servers  onto  fewer  servers  (known  as 
“scaling  up”)  can  help  reduce  the  time  and  effort 
needed  to  manage  the  servers  while  increasing 
performance.  Also,  many  of  today’s  most  popular 
ERP,  CRM,  and  business  intelligence  applications 
are  architected  to  perform  best  on  a  “scale-up? 
single  image  server.  Microsoft  Windows  2000 
Datacenter  Server  and  SQL  Server  2000 
Enterprise  Edition  are  designed  to  efficiently 
utilize  hardware  resources  within  a  single  image, 
and  can  scale-up  to  32  processors  and  32  GB 
of  memory.  All  of  which  means  that  if  you  need 
to  consolidate  your  workload  or  deploy  large 
databases,  the  Microsoft  platform  can  deliver. 


,  #  ■ 


Results  from  the  Transaction  Processing  Performance  Council  (www.tpc.orgl  as  of  10/22/02.  Comparison  of  Microsoft  Windows  .NET  Server  2003  Datacenter  Edition  and  SQL  Server  2000  Enterprise  Edition  versus  Sun  Microsystems  based  on  the  following  two  results  NEC  TX7/i9510, 308621  IpmC.  14.96  $/tpi 
The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 


Scaling  out:  Adding  capacity  when 
you  need  it,  where  you  need  it 


With  today’s  unpredictable  business  climate, 
your  computing  capacity  requirements  can 
change  quickly  and  dramatically.  Distributing  the 
computing  workload  among  multiple  servers, 
with  the  ability  to  add  or  subtract  servers 
to  increase  or  decrease  capacity,  helps  you 
optimize  your  resources.  "Scale  out"  scenarios 
are  typically  ones  in  which  applications  are 
architected  for  distributed  processing,  such  as 
Web  infrastructure  and  application  servers.  The 
Microsoft  platform  supports  both  clustering  and 
network  load  balancing  (NLB),  and  Windows 
2000  Advanced  Server  can  support  up  to  32 
servers  in  NLB  scenarios.  In  addition,  with 
Application  Center  2000  you  can  manage  a 
farm  of  servers  as  one  server,  simplify  your 
management  processes,  and  enable  a  reduction 
in  complexity.  So  if  you  need  a  flexible,  scalable 
environment,  the  Microsoft  platform  is  ready. 


“JetBlue  is  using  the  Microsoft  Server  Platform  to  enable  hardware 
consolidation ,  achieve  better  price-performance,  decrease  IT  support 
costs,  and  reduce  application  development  time.  The  scalability  of  our 
Microsoft-based  infrastructure  gives  us  the  confidence  that  we  are  ready 
to  handle  today's  usage  spikes  as  well  as  future  growth 

—Jeff  Cohen,  Vice  President  &  CIO,  JetBlue  Airways 


I’ For  a  Server  Consolidation  Kit,  webcasts,  and  other  information  that  can  help  you  get  your  infrastructure  scalable  enough  for 
_ _  visit  microsoft.com/enterprise/scalability  Software  for  the  Agile  Business. 
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Can  your  software  help  keep  your  business  up  and  running  no  matter  what? 

Ours  can. 

Your  company's  infrastructure  is  far  too  important  to  risk.  That's  why  our  full  range  of  business  continuity  solutions  ensures  you're 
able  to  handle  anything.  BrightStor,y  storage  solutions  provide  the  most  comprehensive  data  backup  and  recovery.  eTrust'“  security 
solutions  provide  total  protection  for  your  entire  enterprise,  not  just  pieces.  And  Unicenter*  infrastructure  software  keeps  your  whole 
business  up  and  running  24  x7.  As  your  business  grows  and  becomes  more  complex,  you  need  software  solutions  you  can  rely  on. 
You  may  still  not  know  what's  coming.  But  you  will  know  you're  prepared.  ca.com/continuity 


Business  Continuity  Solutions 
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■  9  802.11g  technology  to  star  at  Comdex. 

■  9  Universal  user  IDs  ease  bond  trading. 

■  12  Executives  share  tips  on  “investing”  in  bad  times. 

■  14  Trio  of  IDS  vendors  show  latest  wares. 

■  14  Neoteris  rolls  out  new  line  of  SSL  remote-access  gear. 

■  16  Veritas  acquisition  adds  to  storage  resource  mgmt.  consolidation. 

■  16  Nortel  beefs  up  switching  portfolio. 

■  16A0L  takes  AIM  at  enterprise  market. 

■  18  VC  investments  in  network  start-ups  still  declining. 

■  18  Polycom,  Radvision  simplify  videoconferencing. 

■  22  Start-up  buys  Shiva  name,  products  from  Intel. 

■  24  IT  budgets  down,  but  not  demand  for  technology. 


Infrastructure 

■  25  Avaya  looks  to  reinvent  itself. 

■  25  Sun  targets  mainframe 
users. 

■  26  Server  appliances  die  a  quiet 
death. 

■  26  Brocade  lands  Rhapsody. 

■  28  Kevin  Tolly:  Re-engi¬ 
neering  for  today's  enterprise 
demands. 


Service  Providers 

■  41  Verizon  set  to  enter  business 
long-distance  market. 

■  41  Cybera  touts  low-cost 
routed  WANs. 

■  42  Speedera  partners  with 
TrueSpectra  to  provide  dynamic 
imaging  service. 

■  42  Johna  Till  Johnson: 

How  to  create  "operational 
excellence." 


NetWorker 

■  31  Spins  on  work/life  balance. 

■  32  Toni  Kistner:  EasyVista 
tailors  asset  management  applica¬ 
tion  to  teleworkers. 


The  Edge 

■  45  Gravy  train  from  China 
slows. 

■  45  WaveSmith  names  CEO. 


NetworkWorld  Fusion 

www.nwfusion.com 


Interactive 

The  Best  Issue 

After  perusing  our  annual  guide  to  the  best  technologies,  products  and 
practices,  head  online  for  exclusive  content,  including  full  profiles  of  the 
runners-up  in  our  User  Excellence  Award  competition,  as  well  as  the 
list  of  honorable  mentions. 

DocFinder:  3058 


Columnists 

Compendium 

www,  why,  why,  why 

Fusion  Executive  Editor  Adam  Gaffin  finds  a  guy  who  wonders 
why  some  sites  still  require  you  to  type  www  to  get  to  them. 

DocFinder:  3060 
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Applications 

■  35  Patch  management 
proliferates. 


Technology  Update 

■  49  G.SHDSL:  It's  like  ADSL,  only 
better. 

■  49  Steve  Blass:  Ask  Dr. 

Internet. 


Forum:  Blogs  as  business  tools 

Are  Web  logs  legitimate  productivity  tools  or  time  wasters?  Read  Bill 
Keaggy  s  and  Mark  Hurst's  thoughts  on  the  subject,  then  jump  into 
our  forum  and  add  your  thoughts. 

DocFinder:  3059 


Help  Desk 

Wireless  link  problems 

Columnist  Ron  Nutter  helps  a  user  who's  having  trouble  getting 
his  wireless  access  points  to  ping  each  other. 

DocFinder:  3061 


■  35  Nokia,  Trend  Micro  team  on 
content  security. 

■  36  Microsoft  shakes  up  SALT 
offerings. 

■  36  funk  Software,  Interlink 
improve  wireless  LAN  authentication. 

■  38  Scott  Bradner:  Purina 
paranoid  chow? 


■  50  Mark  Gibbs:  Content 
snitch. 

■  50  Keith  Shaw:  Cool  tools, 
gizmos  and  other  neat  stuff. 

Opinions 

■  52  Editorial:  Sun  CTO  con¬ 
templates  the  future. 


■  53  Nick  Lippis:  Take  control 
of  the  infrastructure. 

■  53  Howard  Anderson: 

Enter  the  cable  carpetbagger. 

■  108  BackSpin:  Dealing  with 
details. 


Toshiba's  new  projectors  lower 
the  price  bar,  see  page  50. 


■  108  'Net  Buzz:  Should  we 
pity  the  poor  telemarketer? 


Seminars  and  Events 

Convergence  is  a  go 

Voice  and  data  finally  can  be  converged  on  the  only  network  that  mat¬ 
ters:  yours.  Let  keynote  presenter  Steve  Taylor  be  your  guide  as  he 
shows  you  why  the  time  is  now  for  VoIP.  Come  to  Network  World's  Tech 
Update:  “VoIP:  The  Right  Time  for  a  Rollout"  and  find  out  how  to  start 
a  VoIP  implementation  today. 
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Home  Base 

Telework  culture  clash 

Columnist  Jeff  Zbar  wonders  if  you've  got  a  problem  on  your 
hands  when  your  teleworkers  fall  into  infrequent  contact  wit! 
the  home  office  DocFinder:  3062 

View  from  the  Edge 

Don't  ignore  the  independents 

The  Edge  Managing  Editor  Jim  Duffy  says  you  should  ti  r  .  e 
attention  to  the  forgotten  ILECs  —  the  non-Bell  incumi;; : : 
local  exchange  carriers. 

DocFinder:  3063 


What  is  DocFinder? 

We’ve  made  it  easy  to  access  articles  ai  d 
resources  online.  Simply  enter  the  four 
DocFinder  number  in  the  search  box  or  ■ 
home  page,  and  you’ll  jump  directly  to  thr- 
requested  information. 
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At  HP  Procurve  Networking,  so  do  we. 

You're  committed  to  making  your  network  run  smoothly  and  meet  the  demands  of  your 
organization,  and  so  are  we.  The  new  HP  Procurve  Switch  5300x1  series  delivers  the 
fastest  layer  3/4  features  for  the  price  of  the  competition's  layer  2  modular  switches. 
And  HP  Procurve  switches  are  fully  interoperable  and  scalable,  making  it  easier  than 
ever  to  add  the  switching  capacity  you  need  for  current  and  future  growth.  These 
convergence-ready  switches  provide  flexibility,  high  port  density,  free  software 
upgrades  and  a  lifetime  warranty. 


And  now  HP  Procurve  gives  you  3  unbeatable  offers: 

•  Trade  in  any  Cisco  2924,  2948,  3548,  4006  or  6500  switches  with  no 
trade-in  limits  when  they  are  traded  for  HP  Procurve  5300  series  switches 

•  Get  a  $400  cash  rebate  on  the  HP  Procurve  4148gl  and  up  to  $500  off 
mini-GBIC  modules  or  transceivers 

•  Buy  an  HP  Procurve  switch  2524  and  get  a  free  100/1000T  transceiver  worth  $389 


Find  out  more  at  www.hpprocurve.com/hiaherportdensitY  or  call 
us  now  to  talk  to  an  HP  Procurve  professional  at  1-800-477-61 1 1 
extension  41682. 
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Faster  wireless  LAN  technology  on  tap 


■  BY  JOHN  COX  AND 
PHIL  HOCHMUTH 

LAS  VEGAS  —  The  potential 
heir-apparent  technology  for 
high-speed  wireless  LANs  will 
take  center  stage  at  Comdex  Fall 
2002  next  week. 

Chip  makers  Intersil  and  Broad¬ 
com,  along  with  a  number  of 
wireless  LAN  vendors  using  their 
silicon,  will  demonstrate  wireless 
products  based  on  the  as-yet- 
unratified  IEEE  802.1  lg specifica¬ 
tions,  which  at  54M  bit/sec  could 
be  successor  to  the  popular 
802. 1 1  b,  or  Wi-Fi,  standard,  which 
tops  out  at  1 1M  bit/sec. 

Proponents  of  802.1  lg  say  it 
offers  corporations  an  easy  way 
to  migrate  their  802.11b  radio 
infrastructures,  including  inter¬ 
face  cards  and  access  points,  to  a 
higher  speed.  That’s  because 
wireless  LANs  based  on  802.1  lg 
will  use  the  same  2.4-GHz  band 


that  802.11b  uses.  The  higher 
data  rate,  translating  into  actual 
throughput  of  about  17M  to  19M 
bit/sec,  would  give  users  more 
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bandwidth  for  an  array  of  multi- 
media  and  other  data-intensive 
applications. 

The  change  also  will  make  it 
easier  for  customers  with 

802.1  lb  deployments  to  increase 
throughput  without  having  to 
replace  wireless  LAN  infrastruc¬ 
tures.  That’s  what  has  to  be  done 
today  when  shifting  from  802. 1  lb 
to  802.11a,  which  runs  in  the  5- 
GHz  band. 

Vendors  say  the  result  is  a  wire¬ 
less  LAN  that  has  the  longer 
range  of  802.11b  and  the  higher 
throughput  of  802.11a.  In  addi¬ 
tion,  any  existing  802.1  lb  adapter 


card  will  be  able  to  work  with  an 

802.1  lg  access  point.  That’s  not 
possible  with  802.11a  adapters. 
So  network  executives  can 
replace  an  802.11b  access  point 
with  an  802.1  lg  access  point  — 
or  simply  swap  the  radio  cards  — 
and  existing  wireless  users  still 
can  connect  to  the  network  at 
the  802.11b  data  rate  of  1 1 M 
bit/sec.  When  or  if  802.1  lg  takes 
hold,  new  adapter  cards  can  be 
phased  in  gradually,  enabling 
these  devices  to  join  a  54M 
bit/sec  wireless  network. 

The  first  802.1  lg  products 
might  be  available  as  early  as 
year-end  or  early  2003.  They’ll 
carry  a  higher  price  tag  than 
802.11b  products,  perhaps  about 
20%,  according  to  one  vendor 
who  asked  not  to  be  identified. 
Current  prices  for  802.11b 
adapters  range  from  $45  to  $140; 
for  802.11b  access  points,  from 
about  $385  to  $1,050,  depending 


A  quick  look  at  802.1  lg  wireless  LANs 

New  products  could  triple  throughput  in  2.4-GHz  band. 
What's  cool:  What’s  uncool: 


•  54M  bit/sec  data  rate, 
estimated  17M  to19M  bit/sec 
throughput. 

•  Higherthroughput  sustained 
over  longer  ranges  than 
802.11a. 

•  Existing  802.11b  clients  still 
work  (but  at  the  1 1 M  bit/sec 
rate). 


on  features.The  802. 1  lg  products 
are  likely  to  complicate  even  fur¬ 
ther  wireless  LAN  return-on- 
investment  calculations  for  net¬ 
work  executives. 

At  Comdex,  Intersil  will 
demonstrate  its  Prism  Duette 


Universal  user  IDs  ease  bond  trading 


■  BY  JOHN  FONTANA 

NEW  YORK  —  A  consortium  of  the 
world’s  top  financial  institutions  is  sharing 
user  directories  so  customers  can  enjoy 
single  sign-on  access  across  their  Web  sites 
in  an  effort  that  is  shaping  up  to  be  a  blue¬ 
print  for  emerging  universal  user  identifica¬ 
tion  standards. 

Under  a  program  called  the 
Bond. Hub  consortium,  Credit 
Suisse  First  Boston,  Goldman 
Sachs,  JPMorgan  Chase,  Lehman 
Brothers,  Merrill  Lynch,  Morgan 
Stanley,  Salomon  Smith  Barney 
and  UBS  Warburg  have  created 
single  sign-on  capabilities  for 
15,000  mutual  customers  seeking 
fixed-income  investments  by  join¬ 
ing  customer  identities  stored  in 
their  respective  directories  —  a 
concept  known  as  federating. 

With  Bond. Hub,  a  user  who 
signs  in  on  one  private  bond  site 
can  cross  over  to  another  institu¬ 
tion’s  private  site,  for  which  the 
user  has  an  account,  without  hav¬ 
ing  to  enter  a  separate  username 


and  password. The  hub  operates  in  the  back¬ 
ground  and  synchronizes  a  user’s  identities 
from  each  institution,  and  brokers  the 
exchange  of  encrypted  security  credentials. 

While  standards  to  support  universal  identi¬ 
ties  for  use  across  the  Internet  are  just  begin¬ 
ning  to  take  shape,  Bond. Hub  shows  that  fed¬ 
erating  authentication  and  authorization  ere 
dentials  can  ease  the  burden  of  administering 
identities  and  access- 
control  data  for  inter¬ 
nal  users  and  busi¬ 
ness  partners.  Today, 
companies  often 
have  to  administer 
those  accounts  man¬ 
ually  or  delegate  ad¬ 
ministration  to  part¬ 
ners,  both  of  which 
are  labor  intensive 
and  don’t  scale. 

The  proprietary 
Bond. Hub  for  feder¬ 
ating  identity  is 
equivalent  in  con¬ 
cept  to  a  proposed 
standard  being  devel¬ 
oped  by  the  Liberty 


Who  are  you? 

On  average,  an  end  user 
in  a  large  company  has 
access  to  27  systems 
on  the  network, 

73% 

of  which  require  a  user 
name  and  password  for 
access,  according 
to  a  recent  Meta 
Group/Pricewater- 
houseCoopers  study  of 
network  executives. 


Alliance,  a  consortium  of  corporations  and 
vendors  that  released  a  specification  in  July 
for  a  Web-based  universal  identity. 

The  Bond. Hub  effort  also  mirrors  the  goals 
of  the  Security  Assertion  Markup  Language 
(SAML),an  XML-based  standard  security  pro¬ 
tocol  that  the  Organization  for  the  Ad¬ 
vancement  of  Structured  Information  Stand¬ 
ards  approved  last  week  (see  related  story 
page  24). 

“Bond. Hub  proves  that  the  Liberty  Alliance 
and  SAML  standards  are  not  being  defined  in 
a  vacuum,”  says  James  Kobielus,  an  analyst 
with  Burton  Group  and  a  Network  World 
columnist.“It’s  a  proof  of  concept  for  federat¬ 
ed  identity  with  account  linking  and  single 
sign-on.  That’s  a  core-use  case  for  Liberty 
Alliance.” 

The  Liberty  Alliance  specification,  which 
incorporates  SAML,  seeks  to  establish  a  stan¬ 
dard  user  authentication  and  authorization 
system  that  is  valid  across  Web  sites.  Microsoft 
is  working  on  a  similar  project  with  its 
Passport  technology.  Both  projects  will 
require  not  only  a  universal  user  identity  but 
also  standards  for  creating  permissions  and 
policies  regarding  access  control,  and  con- 
See  Directory,  page  20 


•  IEEE  standard  still  not 
ratified. 

•  No  Wi-Fi  Alliance 
interoperability  testing 
until  after  ratification. 

•  Three  channels  (vs.  eight 
for  802.11a)  limits  number 
of  access  points  and  users 
in  a  given  area. 


chipset,  which  lets  the  radio 
component  in  the  chip  handle 
802.11a,  802.11b  and  802.1  lg 
transmissions. 

The  company  already  has  what 
it  calls  “alpha  customers,”  most  of 
them  big  Taiwanese  component 
builders.  Using  Duette  samples, 
those  vendors  are  designing 

802.1  lg  cards  that  wireless  LAN 
vendors  will  incorporate  into 
access  points  or  adapters,  says 
Larry  Ciaccia,  vice  president  for 
Prism  wireless  products.  The 
component  builders  are  using 
samples  of  the  Intersil  chips  for 
initial  design  work.  Intersil  plans 
to  ship  higher  volumes  of  chips 
by  year-end  and  be  in  full  pro¬ 
duction  by  March. 

Cisco  has  worked  closely  with 
Intersil,  using  a  number  of  Intersil 
technologies,  but  is  creating  its 
own  media  access  control  layer 
and  integrating  Cisco  manage¬ 
ment  and  security  features.  Cisco 
sees  802.1  lg  as  a  way  to  give  its 
current  Aironet  802.11b  wireless 
LAN  customers  the  ability  to  shin 
gradually  to  higher  throughput 
without  having  to  replace  >  '<  • 
adapter  card  and  rewire  ' 
infrastructure. 

Buffalo  Technology,  a  m  u 
wireless  LAN  player  in  the  r  e 
and  small-business  marke 
bring  out  an  802. 1  lg  ... 
point  and  adapter  ear1 
year,  says  Morikazu  Sano,  -  •  . 
president  with  the  comi  > •; 

See  Comdex,  v>r  '■■■ 
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Persistence  pays  off.  He  needed  the  power  of  10,000  computers 
running  nonstop  for  549  days,  but  Notre  Dame  researcher  Chris  Monico  has  won 
a  $10,000  prize  by  breaking  an  encryption  code  in  a  Certicom-sponsored  contest. 
“I  wanted  desperately  to  jump  up  and  down,  but  the  mathematician  in  me  said, 
‘You'd  better  double  check,'"  Monico  told  Reuters,  The  contest  required  cracking 
a  109-bit  key. 


Acronym  soup.  How  are  technology  acronyms  like  the  weather?. . . 
Complaints  abound  but  solutions  elude.  Three  of  every  four  consumers  say  they're 
sick  of  such  acronyms,  according  to  a  survey  commissioned  by  logear.  Half  say 
that  displeasure  discourages  them 
from  buying.  (Ironically,  a 
press  release  about  the 
survey  describes  logear 
as  a  maker  of  KVM  and 
USB  technologies.)  > 


Facing  the  music. 

A  survey  by  ComScore 
Networks  shows  that  revenue 
from  online  music  sales  during  the  first  nine  months 
of  this  year  plummeted  to  $545  million  from  $730  million  in  the  same 
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period  a  year  earlier.  While  Napster  might  have  been  idled  by  legal  action,  similar 
rogue  Web  services  such  as  Kazaa  and  Morpheus  are  being  blamed  for  the  decline. 


GOP  to  lead  on  high-tech  issues 

■  When  the  Republican  Party  takes  control  of  the  U.S.  Senate  in 
early  January  a  new  crop  of  leaders  will  emerge  on  high-tech 
issues.  Sen.  John  McCain  (R-Ariz.),  a  long-time  proponent  of 
Internet  privacy  likely  will  be  the  chair  of  the  Senate  Commerce, 
Science  and  Transportation  Committee.  McCain  supports  more 
small-business  and  minority  ownership  of  telecom  assets  and  a 
market-based  approach  to  broadband  deployment.  The  commit¬ 
tees  Communications  Subcommittee  likely  will  be  led  by  Sen. 
Conrad  Burns  (R-Mont.),  a  supporter  of  legislation  regarding 
online  and  wireless  privacy,  rural  availability  of  high-speed 
Internet  access,  antispam  measures  and  e-government.  In  the 
Republican-controlled  U.S.  House  of  Representatives,  the  key 
leader  on  communications  issues  will  remain  Rep.  Billy  Tauzin 
(R-La.),  who  chairs  the  House  Energy  and  Commerce  Committee. 
Tauzin  has  supported  legislation  freeing  up  the  Baby  Bells  for 
long-distance  and  broadband  services,  and  creating  new  spec¬ 
trum  policy  to  encourage  3G  wireless  deployment. 

Analyst  John  McConnell  dies 

■  John  McConnell,  a  well-known  industry  analyst  and  president  of  McConnell 
Associates,  died  suddenly  Nov.  3  at  his  home.  He  was  58  years  old.  A  computer  science 
graduate  from  the  University  of  California,  Berkeley,  McConnell  had  a  career  in  the  net¬ 
work  industry  dating  back  more  than  25  years.  He  became  an  expert  in  network  and  sys¬ 
tems  management,  working  with  leading  management  vendors  such  as  IBM,  Hewlett- 
Packard  and  Computer  Associates  to  improve  products  and  address  customer  needs. 
Most  recently  McConnell  focused  on  service-level  management,  policy-based  manage¬ 
ment  and  management  technologies  for  e-business  initiatives.  McConnell  spoke  fre¬ 
quently  at  industry  events  and  contributed  columns  to  trade  publications. 

C&W  wins  legal  round  vs.  Akamai 

■  Cable  &  Wireless  won't  have  to  turn  off  its  content  delivery  network  service.  In  the  lat¬ 
est  twist  in  the  legal  battle  of  the  CDNs,a  federal  judge  in  Boston  has  denied  a  motion 
that  Akamai  Technologies  filed  to  find  C&W  in  contempt  for  not  shutting  off  its  service. 
A  federal  jury  last  year  found  that  the  Digital  Island  Footprint  CDN  service,  now  owned 
by  C&W  infringed  on  an  Akamai  patent,  and  federal  Judge  Rya  Zobel  issued  a  perma¬ 
nent  injunction  against  C&W  this  summer.  C&W  has  said  the  ruling  is  moot  because  it 
addresses  technology  no  longer  used  within  its  CDN  service.  On  Nov.  1,  Zobel  validated 
that  claim  by  denying  Akamai’s  contempt  motion. 


The  power-strip  guy 

Glenn  Fleishman  is  helping  to  organize  a  conference.  He's  appointed  himself  the 
power^strip  coordinator  -  he'll  buy  a  bunch  of  power  strips  for  laptop-toting  atten¬ 
dees  to  use.  And  he's  hoping  to  raise  money  through  sponsorships. 

Read  more  at  iviviv.nwfusion.com,  DocFinder:  3064. 


RSA,  PKWare  put  heads  together 

■  RSA  Security,  which  makes  public-key  infrastructure  and  access-control  software,  and 
PKWare,  which  makes  the  Zip  compression  software  for  storing  and  exchanging  large  data 
files,  have  agreed  to  cross-license  each  other’s  technologies.  PKWare  can  use  RSAs  BSAFE 
encryption  software  with  PKZIP  compression  products,  while  RSA  can  use  PKZIP  com¬ 
pression. The  alliance  also  involves  joint  development  on  new  products  for  desktop, serv¬ 
er  and  mainframe.  Use  of  encryption  to  scramble  data  makes  it  safer,  but  adds  overhead. 
Compression  could  help  reduce  the  overhead  associated  with  encryption. 

IBM  joins  storage,  server  units 

■  IBM  plans  to  combine  its  storage  and  server  divisions  early  next  year, and  will  shift  stor¬ 
age  head  Linda  Sanford  to  lead  the  on-demand  computing  initiatives  that  CEO  Sam 
Palmisano  recently  outlined.  IBM’s  Server  Group  and  Storage  Systems  Group  will  be 
merged  as  of  Jan.  1,  operating  as  one  organization  under  the  direction  of  Bill  Zeitler,  cur¬ 
rently  senior  vice  president  of  the  server  group.  On-demand  computing  will  be  IBM’s 
focus,  Palmisano  said  in  his  recent  talk,  describing  a  vision  of  IT  infrastructure  incorpo¬ 
rating  technology  from  an  array  of  product  areas  aimed  at  maximizing  businesses’  flexi¬ 
bility  and  responsiveness. 

Sun  shows  off  new  ‘compute  ranch' 

■  Sun  last  week  opened  a  research  center  dedicated  to  developing  new  designs  for  its 
UltraSparc  processors  in  Burlington,  Mass.The "compute  ranch,” as  Sun  calls  it,  will  feature 
more  than  7,500  UltraSparc  nodes  running  batch  jobs  24-7,  the  company  said.  The  new 
center  lets  Sun  manage  the  complex  number  of  calculations  needed  to  simulate  the  inter¬ 
actions  of  millions  of  transistors  on  future  UltraSparc  chips.  On  a  typical  day,  Sun’s  hard¬ 
ware  designers  submit  about  140,000  jobs  to  the  network,  which  would  require  about  15 
years  to  process  with  one  processor, Sun  said. 

More  going  online  for  government  info 

■  The  number  of  citizens  worldwide  using  the  Internet  to  access  government  services  or 
products  during  the  past  year  increased  15%,  according  to  the  second  Government 
Online  Study  published  last  week  by  the  London  market  research  company  Taylor  Nelson 
Sofres.  Globally,  30%  of  citizens  said  they  had  accessed  government  services  online,  com¬ 
pared  with  26%  a  year  ago.  Countries  showing  the  highest  increases  include  Australia 
(from  31%  to  46%), Turkey  (from  3%  to  13%), the  Netherlands  (from  31%  to  41%)  and  the 
U.S.  (from  24%  to  43%).  Countries  showing  the  highest  levels  of  e-government  usage  are 
Sweden  (57%  of  the  population), Norway  (56%), and  Singapore  and  Denmark  (both  53%), 
according  to  the  study.  Countries  with  the  lowest  level  of  usage  were  Japan  and  the  U.K., 
each  with  13%  of  the  population. 
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Do  your  employees  work  from  home?  From  the  road? 


The  e-Gap*  Remote  Access  Appliance 


Whale's  SSL  VPN  brings  the  office  to  your 
employees  from  any  browser,  anywhere  - 
offering  web  access  to  applications  and 
network  file  shares 


Securely  increase  productivity 
and  enhance  customer 
satisfaction  with  e-Gap- 
enabled  web  access  to: 


I  •  Microsoft  Outlook  Web  Access 


(OWA) 


Lotus  iNotes 


Frees  the  employee  from  being  bound  to  a  particular  location, 
laptop  or  device  for  the  purpose  of  accessing  their 
Intranet  resources 


Lowers  TCO  of  IPSec  VPN  deployments  significantly 
Provides  a  single  point  of  entry  to  internal  applications 
Maintains  the  highest  level  of  network  security  -  no  Intranet 


LotusWebmail 
SameTime' 

QuickPlace"' 

Pension/401(k) 

Rate  quotes 
Online  payments 
Policy  access/update 
Customer  Relationship  Management 
Time  and  Expense 
Enterprise  Information  Portals 


On-line  Claims 


exposure  to  the  Internet 


Secures  access  from  untrusted  locations 


Patient-eligibility 
And  More... 


Scales  to  meet  the  demand  of  the  largest  organizations 
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For  more  information,  call: 
1-877-65-WHALE  or  201-947-9177  ext.  2 
info@whale-com.com 
www.whalecommunications.com/nww 
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XrST  iNotes,  and  Quickplace  are  either  registered  trademarks  or  trademarks  of  IBM  Corporate  i 

All  other  trademarks  are  the  property  of  their  respective  holders. 
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Execs  share  tips  on  ‘investing’  in  bad  times 


■  BY  ANN  BEDNARZ 

BOSTON  —  American  Express  has  con¬ 
tinued  to  grow  its  investment  in  IT  through¬ 
out  the  current  economic  downturn,  resist¬ 
ing  the  temptation  to  retreat  from  new  ini¬ 
tiatives  until  the  economy  improves. 

“Uncertainty  makes  business  planning 
harder  to  do,  even  as  it  makes  it  more 
important, "CEO  Kenneth  Chenault  told  an 
audience  of  IT  executives  last  week  at 
Forrester  Research’s  annual  Executive 
Strategy  Forum. 

The  financial  services  firm  over  the  last 
few  years  has  worked  to  achieve  economic 
flexibility  through,  among  other  tactics, 
broadening  its  product  set,  expanding  dis¬ 
tribution  channels  and  improving  opera¬ 
tional  efficiency  —  all  through  the  use  of 
technology.  In  particular,  The  Internet  has 
helped  it  rework  all  of  its  processes,  prod¬ 
ucts  and  services,  Chenault  said. 

Forrester  Research  has  a  term  for  com¬ 
panies  like  American  Express  that  use 
technology  to  accelerate  their  recovery 


I  ft  Uncertainty  makes  busi¬ 
ness  planning  harder  to  do, 
even  as  it  makes  it  more 
important  9  9 

Kenneth  Chenault 

CEO,  Forrester  Research 

and  try  to  distance  themselves  from  less- 
bullish  competitors:  “stealth  aggressors." 
Companies  such  as  Wal-Mart,  Procter  & 
Gamble  and  Intel  are  making  bold  tech¬ 
nology  investments  and  driving  to  emerge 
from  the  recession  as  dominant,  said 
George  Colony  CEO  of  Forrester,  in  the 
conference’s  opening  address. 

About  600  attendees  turned  out  for  the 
two-day  event,  which  centered  around  a 
theme:  The  right  application  of  technol¬ 
ogy  will  accelerate  your  recovery 
So  what  are  the  best  technologies  to 
apply  now?  Forrester  identified  four  as  crit¬ 


ical  to  companies  on  the  road  to  recovery: 

•  Web  services,  even  though  it  is  “vastly 
overhyped”  and  obscured  “by  the  haze  of 
.Net,”  Colony  said. 

•  Sound  customer-facing  technologies 
that  steer  customers  to  the  right  channel 
—  whether  the  Web,  call  center,  retail  store 
or  catalog  —  at  the  right  time  to  maximize 
satisfaction  while  keeping  costs  down. 

•  Organic  IT,  a  Forrester  term  that  de¬ 
scribes  a  migration  from  monolithic,  pro¬ 
prietary  back-end  systems  to  more  flexi¬ 
ble,  modular  systems  that  can  be  appor¬ 
tioned  on  demand. 

•  Adaptive  supply  networks  that  let  com¬ 
panies  adjust  to  accommodate  changing 
market  conditions  and  supplier  demands. 

These  technologies  correlate  with  ex¬ 
ceptional  financial  performance,  said 
Christopher  Mines,  group  director  at  For¬ 
rester.  Mines  shared  the  results  of  a  new 
survey  showing  the  companies  that  spend 
the  most  money  on  IT  aren’t  necessarily 
the  ones  achieving  the  most  revenue  and 
cash-flow  growth. 


Forrester  looked  at  three  variables  —  rev¬ 
enue  growth,  average  return  on  invest¬ 
ment  and  cash-flow  growth  —  over  a 
three-year  period  and  compared  each 
company’s  average  with  the  industry  aver¬ 
age.  It  found  that  companies  that  spent  the 
most  on  IT  —  about  4.5%  of  revenue  — 
were  outperformed  by  companies  spend¬ 
ing  3.3%  of  their  revenue  on  IT.  Those 
spending  the  least  on  IT  —  about  2.6%  of 
revenue  —  turned  in  the  lowest  financial 
performance. 

The  study  also  showed  the  top  perform¬ 
ers  are  early  Web  services  adopters,  have 
made  their  supply-chain  software  and  cus¬ 
tomer-focused  software  work  for  them, 
and  are  frugal  when  it  comes  to  infra¬ 
structure  expenditures. 

A  common  theme  among  all  the  speak¬ 
ers  was  the  importance  of  tackling  process 
and  organizational  changes  when  new 
technology  is  considered.  For  this  reason, 
it’s  critical  that  technology  decisions  be 
made  by  a  consensus  of  IT,  marketing  and 
business  strategists.  ■ 
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Tripwire  is  The  Data  Integrity  Assurance  Company 


Tripwire'  establishes  a  baseline  of  data  in  its  known  good 
state,  monitors  and  reports  any  changes  to  that  baseline, 
and  enables  rapid  discovery  and  recovery  when  an 
undesired  change  occurs. 

Foundation  for  Data  Security 

■  Ensure  the  integrity  of  your  data 

■  Instant  assessment  of  system  state,  reporting 
"integrity  drifts’’ 

Maximize  System  Uptime 

■  Eliminate  risk  and  uncertainty 

■  Enable  quick  restoration  to  a  desired  state 


©  Copyright  2002  Tripwire  and  the  Tnpwire  togo  are  registered  trademarks  ot  Tripwire.  Inc. 


Increase  Control  and  Stability 

■  Ongoing  monitoring  and  reporting 

Lower  Costs 

■  Find  and  fix  problems  quickly  and  precisely  - 
no  more  guess  work 

Your  firewalls  and  intrusion  detection  tools  alone  are 
not  enough  to  keep  systems  trustworthy.  Tripwire's  data 
integrity  assurance  products  are  the  only  way  to  know  with 
100%  confidence  that  your  data  remains  uncompromised. 
For  nearly  10  years  Tripwire  has  been  helping  IT 
professionals  know  exactly  what’s  changed  on  their 
systems,  and  helping  them  to  recover  quickly. 


For  a  FREE  30-day 
fully-functional  eval, 

call  toll-free:  1.800.TRIPWIRE 
(874.7947)  or  visit 

http://networld.tripwire.com 

today! 


TRIPWIRE 
I  Kir  WIRE 

THE  DATA  INTEGRITY  ASSURANCE  COMPANY 
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Reading  someone  else's 
copy  of  Network  World? 

Apply  for  your  own 
Free  subscription  today. 
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Put  to  the  test 


IP  telephony  talk 
zeroes  in  on  SIP 


Free  subscription 

(51  Issues) 

To  apply  online  go  to 

subscribenw.com/b02 
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Apply  for  your 

free 

subscription  today! 

(A  $255  value  -  yours  free) 


State  of  the 

LAN/MAN 

Re-engineering  for  Today's 
Enterprise  Demands 


Considering  an  upgrade  to  10G  Ethernet?  Need  to  fold  voice  into  your  IP  network?  Want  to  have  stored 
data  at  the  ready?  Hoping  to  untether  parts  of  your  network  with  wireless  access?  Before  you  delve  too 
far  into  any  of  these  areas,  you  need  to  take  a  long,  hard  look  at  your  network  and  its 
capabilities.  Attend  Network  Worlds  FREE  event  "State  of  the  LAN/MAN:  Re-engineering  for  Todays 
Enterprise  Demands"  to  find  out  how  to  create  a  network  blueprint  that  gracefully  addresses  the  needs 

of  emerging  technologies. 


Reserve  your  seat  at  one  of 
these  convenient  locations! 


November  13 
November  14 
December  3 
December  4 
December  11 
December  12 


Westboro,  MA 
New  York,  NY 
Chicago,  IL 
Washington,  DC 
San  Jose,  CA 
Long  Beach,  CA 


BONUS!  Attend  and  have 
a  chance  to  win  a  $100 
American  Express  Gift 
Cheque!  You  must  be 
present  to  win. 
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Produced  in  association  with: 

TOLLY 

GROUP 


Don't  miss  out  —  sign  up  online  at 
www.nwfusion.com/events/lanman/register.jsp 

or  call  1-800-643-4668  now! 


Kevin  Tolly 
President  and  CEO 


This  event  is  limited  to  qualified  IT  professionals  currently  involved  in  the  evaluation  and  purchase  of  LAN/MAN  products  and  services.  Network  World  reserves  the  right  to  determine  total  audience  profile. 
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To  sponsor  this  event,  contact  Andrea  D'Amato  at  508-490-6520  or  adamato@nww.com. 
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Trio  of  IDS  vendors  show  latest  wares 

NetContinuum  releases  its  first  product,  while  ForeScout  and  Top  Layer  issue  upgrades. 


■  BY  ELLEN  MESSMER 

Choice  in  intrusion-detection 
systems  gets  wider  this  week  as 
start-up  NetContinuum  makes  its 
debut  with  a  Web  security  appli¬ 
ance,  while  ForeScout  Tech¬ 
nologies  and  Top  Layer  Networks 
expand  their  product  lines  for 
thwarting  network  attacks. 

NetContinuum  will  unveil  the 
Web  Security  Gateway  NC-1000, 
an  application-layer  gateway  ap¬ 
pliance  that  sits  behind  a  firewall 
and  in  front  of  a  Web  server  to 
block  HTTP-based  attacks  and 
serve  as  a  proxy  for  access  con¬ 
trol  and  Secure  Sockets  Layer 
(SSL)  encryption  processes. 

NC-1000  is  intended  to  perform 
application-intrusion  prevention 
like  competitors  Sanctum,  KaVa- 
Do  and  Stratum8  perform  with 
their  software-based  products,  but 


New  from  intrusion-detection  vendors 

ForeScout,  NetContinuum  and  Top  Layer  are  taking  the  wraps  off  new  wares  this  week. 


Product 

Description 

Price  i 

ForeScout 

ActiveScout 

Enterprise 

Enterprise  Manager  console  correlates 
reports  and  manages  up  to  50  Scout 
devices,  which  are  placed  outside  a  firewall 
to  detect  and  block  selected  attacks. 

Enterprise  Manager 
starts  at  $10,000; 
each  Scout  at  $3,000. 

NetContinuum 

Web  Security 
Gateway  NC-1000 

Runs  at  100M  bit/sec  or  1G  bit/sec  behind 
a  firewall  and  in  front  of  a  Web  server 
to  prevent  Port  80  attacks;  access 
controls;  SSL  encryption. 

$28,000  to  $38,000. 

Top  Layer 

Four  models  of  in-line 
Attack  Mitigator  IPS 
appliance 

Can  detect  and  block  Port  80  and  denial- 
of-service  attacks. 

Models  range  from 
$15,000  to  $250,000. 

also  offers  an  encryption  engine 
and  access  control  based  on 
passwords  or  certificates. 

NC-1000  can  reach  near-gigabit 


speed  to  process  6,000  encrypted 
sessions  per  second  or  1  million 
unencrypted  sessions. The  gate¬ 
way  also  can  hide  information 


Neoteris  rolls  out  SSL  gear 


■  BY  TIM  GREENE 

MOUNTAIN  VIEW  CALIF  —  Neoteris  is  making  it 
possible  to  cluster  its  Secure  Sockets  Layer  remote- 
access  machines  so  customers  don’t  lose  their  con¬ 
nections  to  business  networks  if  one  box  should  fail. 

The  company  this  week  is  dem¬ 
onstrating  three  new  hardware 
platforms  that  boost  capacity  of  its 
products  so  they  will  be  more  at¬ 
tractive  to  customers  with  a  lot  of 
remote  users.  Neoteris  uses  SSL 
technology  in  Web  browsers  rather 
than  remote-access  clients  that 
would  have  to  be  installed  on  re 
mote  PCs.  This  differs  from  IP-Security-based  VPNs 
that  require  dedicated  client  software  on  remote 
machines  and  is  simpler  to  deploy 

The  new  equipment, called  Access  Series, can  sup¬ 
port  up  to  7,000  SSL  sessions  at  a  time  by  clustering 
the  boxes.  The  company’s  old  hardware.  Instant 
Virtual  Extranet  (IVE),  maxed  out  at  1,000. 

The  Access  Series  replaces  IVE  hardware  and 
sports  a  new  version  of  software,  IVE  3.0,  that  lets 
users  cluster  the  devices  and  compress  traffic.  It  can 
tap  external  directories  to  create  groups  of  users  that 
are  allowed  access  to  the  gear. 

The  devices  sit  in  a  separate  network  segment 
behind  the  firewall  and  establish  SSL  connections  to 
remote  machines  after  the  remote  users  authenti¬ 
cate  themselves.  The  devices  proxy  traffic  between 
the  remote  machines  and  corporate  servers  that 
host  Web-based  and  other  applications. 

The  option  to  cluster  gear  is  key  to  Plalo  Alto  law 
firm  Wilson  Sonsini,  Goodrich  &  Rosati,  says  the 
firm’s  CIO  Phillip  Hoare.  The  firm  now  has  redun¬ 
dant  IVE  boxes,  so  if  one  fails,  users  have  a  second 
one  to  which  they  can  reconnect.  If  one  device  fails, 


Neoteris's  Access  1000,  3000  and 
5000  SSL  remote-access  products 
are  more  powerful  than  the  com¬ 
pany's  existing  gear. 


another  box  picks  up  the  sessions  without  user  inter- 
vention.“Remote  access  is  essential  to  us  after-hours, 
and  we  have  an  unforgiving  population,  being  law¬ 
yers,”  Hoare  says. 

Neoteris  competes  against  vendors  such  as  As- 
pelle,Aventail,Netilla  and  Safe  Web,  as  well  asV-One, 
which  has  an  alternative  clientless 
technology 

“1  believe  [Neoteris  is]  the  only 
one  of  the  start-up,  SSL  remote- 
access  vendors  doing  failover,” 
says  Zeus  Kerravala,  a  vice  presi¬ 
dent  with  The  Yankee  Group. 

Customers  can  link  up  to  eight 
Access  5000  boxes  in  load-balanc¬ 
ing,  failover  mode.  Each  box  is  active  all  the  time, 
processing  SSL  sessions,  and  if  one  fails,  the  others 
take  over. Together,  eight  Access  5000s  can  support 
7,000  simultaneous  users.  Access  5000  supports 
compression  that  can  cut  the  size  of  transmission 
time  in  half,  saving  download  time  for  users.  It  also 
has  a  separate  processor  to  handle  SSL  encryption. 

The  other  two  Access  boxes  have  smaller  capacity 
and  support  fewer  features.  Access  3000  lacks  com¬ 
pression  and  an  SSL  processor,  and  supports  failover 
between  only  two  boxes.  Access  1000  boxes  can  be 
paired,  but  when  one  box  fails  over  to  the  other,  ses¬ 
sions  must  be  re-established. There  are  three  models 
of  Access  1000  that  cost  $10,000  to  support  50  simul¬ 
taneous  users,  $15,000  to  support  100  and  $25,000  to 
support  250.  Access  3000  comes  in  four  models  that 
support  between  100  and  1,000  users  for  $30,000  to 
$70,000.  Access  5000  has  five  models  from  $40,000  to 
$1 15,000  to  support  100  to  2,500  simultaneous  users. 

The  original  IVE  appliance  ranged  in  price  from 
$10,000  for  support  of  50  simultaneous  users  to 
$100,000  for  support  of  1,000. 

The  new  appliances  will  be  available  Dec.  15.B 


about  the  Web  site,  making  it 
harder  for  hackers  to  determine 
the  Web  server  platform. 

“We  wanted  to  ‘masquerade’ 
our  front-end  systems,”  says  Mike 
O’Connell,  systems  architect  at 
Ross  Stores  in  Newark,  Calif., 
who’s  been  beta-testing  the  NC- 
1000  as  a  core  security  compo¬ 
nent  for  the  retail  chain’s  Web- 
based  business-to-business  site. 

“But  we  were  also  looking  to 
solve  three  or  four  problems  at 
once  with  this,  including  SSL 
encryption  and  intrusion  detec¬ 
tion, ”he  says. 

Ross  Stores  is  opting  to  use  the 
public-key  digital  certificate  capa¬ 
bility  in  NC-1000  to  provide  these 
trading  partners  with  a  certificate 
for  secure  access  to  the  Ross 
Stores  Web  site.  NC-1000  also  can 
provide  a  log  of  Web-based  trans¬ 
actions  and  time-stamp  them. 

According  to  Pete  Lindstrom,  re¬ 
search  director  at  Spire  Security, 
there  is  no  other  product  compa¬ 
rable  to  NC-1000.  “This  represents 
a  convergence  between  the  IDS 
and  trust  capabilities  in  one  secu¬ 
rity  appliance,”  he  says. 

NetContinuum  was  founded  by 
two  network  engineers,  Peter 
Roman,  vice  president  of  engi¬ 
neering,  and  Jan  Bialkowski.CTO, 
with  $36  million  in  venture  capi¬ 
tal  funding,  primarily  from  Menlo 
Ventures,  according  to  Wes 
Wasson,  NetContinuum’s  vice 
president  of  marketing. 

The  interest  in  stopping  attacks 
rather  than  simply  monitoring 
them  has  other  IDS  vendors  step¬ 
ping  up  their  own  efforts. 

ForeScout,  which  last  year  intro¬ 
duced  ActiveScout  Site  Solution 
for  stopping  network-based  at¬ 


tacks  outside  the  perimeter  fire¬ 
wall,  now  has  a  version  of  the  IDS 
that  can  be  managed  more  effec¬ 
tively  across  a  large  company 

Unlike  the  first  version  of 
ActiveScout,  where  Scout  de¬ 
vices  had  to  report  to  its  own 
management  console,  the  new 
version  available  this  week, 
called  ActiveScout  Enterprise, 
lets  a  central  console  manage  up 
to  50  Scouts. 

The  Scout  device  doesn’t  block 
attacks  but  instead  thwarts  con¬ 
nections  from  attackers  through 
techniques  such  as  TCP  re-set, 
says  Nancy  Blair,  ForeScout’s  vice 
president  of  marketing. 

Meanwhile,  Top  Layer  will  an¬ 
nounce  products  aimed  at  letting 
customers  block  HTTP  Port  80 
attacks.  Top  Layer’s  previous  At¬ 
tack  Mitigator  products  focused 
on  stopping  denial-of-service 
attacks. 

The  new  products,  called  At¬ 
tack  Mitigator  IPS,  look  at  HTTP 
traffic  and  other  Web  server 
vuInerabilities.Top  Layer’s  four  in¬ 
line  IDS  products  can  operate  in 
active-blocking  or  passive-moni¬ 
toring  mode. 

The  $15,000  Attack  Mitigator  IPS 
100,  for  use  on  a  100M  bit/sec 
link,  has  a  physical  bypass  capa¬ 
bility  in  the  event  the  in-line 
active-blocking  device  goes 
down.  The  $25,000  gigabit-speed 
Enterprise  1000,  with  up  to  seven 
100M  bit/sec  ports,  is  for  use  on 
the  Internet  perimeter  and  inside 
the  corporate  network. 

The  IPS  2400  and  the  IPS  2800, 
costing  from  $125,000  to 
$250,000,  are  for  data  centers 
where  four  to  eight  of  the  appli¬ 
ances  can  be  clustered  to  meet 
routing  requirements  common  in 
Web-hosting  facilities. 

An  early  adopter  of  the  Attack 
Mitigator  IPS,  Larry  Pfeifer,  net¬ 
work  engineer  at  Widener  Uni¬ 
versity  in  Philadelphia,  says  the 
IDS  appliance  can  block  attacks 
against  the  university’s  network 
without  impeding  legitimate 
flow.  But  Widener,  which  also 
uses  the  RealSecure  passive¬ 
monitoring  IDS  from  Internet 
Security  Systems,  has  no  plans  to 
abandon  this  second  IDS  behind 
Attack  Mitigator. 

“I  want  this  there  to  catch  any¬ 
thing  Attack  Mitigator  IPS  doesn’t 
see  and  to  have  an  IDS  available 
if  the  in-line  Attack  Mitigator 
goes  down,”  Pfeifer  says.  ■ 
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Veritas  acquisition  adds  to  market  consolidation 


Integration  of  StorageReporter  into  Veritas’  SANpoint 
Control  enables  more  complex  reporting  and  analysis. 
Key  features  include: 


Veritas  SANpoint  Control  3.5 

StorageReporter 

Automated  provisioning  and  storage 
management 

Reporting  and  analysis 

Discovery  and  monitoring  of 
heterogeneous  devices 

Predictive  capacity 
modeling 

Integrates  with  Oracle,  Microsoft 
Exchange,  Veritas  and  third-party 
applications. 

Quota  reporting,  charge 
backs,  cost  allocation 

■  BY  DENI  CONNOR 

MOUNTAIN  VIEW,  CALIF  — 
Veritas  last  week  bought  NTP 
Software  technology  to  supple 
ment  the  package  it  sells  to  help 
monitor  and  manage  storage 
networks. 

Veritas  will  integrate  NTP’s  Stor¬ 
age  Reporter  storage  usage  trend 
and  projection  package  into 
Veritas’  SANPoint  Control  in  the 
next  six  months  to  improve  its 
file  system  scanning,  trend  analy¬ 
sis  and  capacity  usage  capabili¬ 
ties.  The  company  also  will  in¬ 
tegrate  Storage  Reporter  with  its 
Volume  Manager, File  System  and 
NetBackup,  as  well  as  other 
Veritas  products,  over  the  next  12 
to  18  months. 


■  BY  DENISE  PAPPALARDO 


The  acquisition  is  Veritas’  sec¬ 
ond  in  the  storage  resource  man¬ 
agement  (SRM)  market.  In  1998, 
the  company  acquired  Wind¬ 


ward  Technologies  and  inte¬ 
grated  its  predictive-failure  analy¬ 
sis  tools  into  its  storage  manage¬ 
ment  products. 

The  acquisition  of  NTP’s  report¬ 
ing  utility  comes  at  a  time  when 
SRM  companies  are  being  snap¬ 
ped  up  by  large  systems  manu¬ 


facturers,  such  as  EMC  and  IBM. 
Sun  started  the  consolidation  of 
the  SRM  market  in  April  2001 
with  the  acquisition  of  start-up 
HighGround’s  software.  IBM  Tivoli 
and  EMC  purchased  SRM  com¬ 
panies  in  September  of  this  year: 
Tivoli  bought  Trellisoft,  and  EMC 
took  over  Prisa  Networks  this 
year  and  acquired  SoftWorks 
in  1999. 

Other  companies  have  bene¬ 
fited  to  a  lesser  degree  from  the 
acquisition  of  SRM  companies 
—  Hewlett-Packard,  McData, 
Computer  Associates  and  Fujitsu- 
Softek  have  each  picked  up  a 
variety  of  SRM  start-ups. 

“You  are  going  to  see  further 
consolidation  because  the  SRM 
market  isn’t  a  business,  it’s  a  fea¬ 
ture  —  that  function  will  roll  up 
into  higher-level  software  prod¬ 
ucts  like  EMC’s  ControlCenter  or 
CA  or  BMC,”  says  Steve  Duplessie, 


senior  analyst  with  Enterprise 
Storage  Group. 

Analysts  also  say  consolidation 
is  beneficial  to  customers  be¬ 
cause  those  customers  now  will 
be  able  to  purchase  SRM  along 
with  other  storage  capabilities 
from  the  same  vendor. 

“It’s  a  trade-off  between  a  sin¬ 
gle  vendor  and  several  vendors 
with  different  capabilities,”  says 
James  Gruener, senior  analyst  for 
The  Yankee  Group.  “The  chal¬ 
lenge  is  choosing  vendors  that 
have  a  strong  foundation  but 
also  have  appropriate  add-on 
products  that  offer  customers 
additional  value  for  the  least 
amount  of  moneyf 

As  far  as  consolidation  goes, 
only  a  handful  of  independent 
SRM  companies  remain  — 
among  them  are  Astrum  Soft¬ 
ware,  Teracloud,  Tek-Tools  and 
Intermine.  ■ 


A0L  gateway  takes  AIM 
at  enterprise  market 


Nortel  beefs  up  portfolio 


DULLES, VA. — AOL,the  largest  consumer  ISP  launched  a  product  last 
week  that  lets  business  users  track  and  monitor  Instant  Messenger  traf¬ 
fic  within  corporate  networks. 

The  AIM  Enterprise  Gateway  is  the  first  in  a  series  of  AIM  Enterprise 
Services  the  company  has  planned.The  gateway  which  was  developed 
using  software  from  FaceTime  Communications, lets  users  monitor  and 
log  AOL  Instant  Messenger  (AIM)  traffic  that  originates  from  their  cor¬ 
porate  networks.The  gateway  sits  behind  a  firewall  and  acts  as  a  proxy 
between  end  users  and  AOL’s  network. 

“The  gateway  lets  enterprises  know  what  users  are  using  the  service 
for.  It  maps  user  traffic, allows  for  file  transfer  limits, audits  traffic  and  lets 
IS  managers  create  a  corporate  directory  of  users,”  says  Brian  Curry 
senior  director  of  strategy  development  at  AOL. 

AOL  is  developing  enterprise  products  because  individuals  are  using 
AIM  over  their  corporate  networks,  and  more  companies  are  using  AIM 
as  a  communication  tool  among  employees,  Curry  says. 

According  to  a  study  released  by  Osterman  Research  in  September, 
42%  of  businesses  are  using  instant  messaging  within  their  company 
sometimes  without  permission  from  their  IT  department.  Not  all  users 
are  sold  on  the  instant  messaging.  In  fact,  23%  actively  block  this  type 
of  traffic,  and  22%  have  no  plans  to  use  instant  messaging  at  all. 

Yet,  AOL  is  addressing  the  needs  of  businesses  that  are  supporting 
AIM  in-house.  AOL  is  offering  its  optional  Private  Domain  Service  with 
“federated  authentication,”  which  lets  companies  create  screen  identi¬ 
ties,  or  individual  usernames,  based  on  their  corporate  names.  A  com¬ 
pany  can  create  names  such  as  johndoe@acme.com.  The  Private 
Domain  Service  also  lets  users  add  or  delete  screen  names  at  any  time. 

Federated  authentication  lets  companies  encrypt  AIM  traffic 
between  multiple  sites  using  digital  certificates. The  only  added  cost 
is  the  fees  paid  to  a  third-party  digital  certificate  authority  that  issues 
and  verifies  each  certificate.  Curry  says  users  can  team  up  with  any 
certificate  authority  or  use  the  certificate  authority  services  of 
VeriSign,  an  AOL  partner. 

The  company  also  is  expected  to  release  an  enterprise  AIM  client  that 
would  support  end-to-end  encryption.  AOL  is  testing  the  software  and 
expects  to  release  it  in  the  first  quarter  of  next  year. 

The  AIM  Enterprise  Gateway  is  available  now.  Licenses  cost  $30  to  $40 
per  user.  Customers  also  pay  an  annual  maintenance  fee  that’s  based 
on  the  size  of  a  deployment. 

AIM:  www.aim.com 


New  10  Gigabit  firmware,  traffic  shaping  switches  on  tap. 


■  BY  PHIL  HOCHMUTH 


SANTA  CLARA  —  Nortel  last 
week  released  software  to  sup¬ 
port  multiple  10G  Ethernet  inter¬ 
faces  on  its  core  switch, as  well  as 
two  load-balancing  devices  in¬ 
tended  to  increase  availability  of 
enterprise  data  centers  and 
WAN  links. 

Version  3.3  of  Nortel’s  Passport 
8600  software  could  ease  10G 
Ethernet  deployments  by  allow¬ 
ing  the  core  switch  to  be  de¬ 
ployed  with  either  WAN  or  LAN 
10G  Ethernet  modules.  Before 
this  upgrade,  users  could  install 
software  to  support  LAN  or  WAN 
10  Gigabit  connections  on  a  Pass¬ 
port,  but  not  both.  Nortel  also  will 
release  its  Alteon  Application 
Switch  2224  load-balancing  switch  and  the  Alteon 
Link  Optimizer  for  shaping  traffic  in  data  centers 
and  across  WAN  links. 

The  new  software  for  the  Passport  8600  will  let 
the  chassis  be  deployed  either  with  Nortel’s  WAN 
physical  layer  connection,  its  LAN  PHY  module,  or 
both.  The  WAN  module  has  a  serial  interface,  a 
range  of  up  to  25  miles,  and  runs  on  single-mode 
fiber.  The  module  is  also  compatible  with  an  OC- 
192  infrastructure. 

The  LAN  PHY  module  has  a  range  of  about  6 
miles  and  runs  over  multi-  and  single-mode  fiber. 
Previous  Passport  8600s  could  support  only  one  or 
the  other  of  the  two  10  Gigabit  PHY  modules. 

The  Alteon  Application  Switch  2224  is  a  24-port 
Layer  2-7  switch  intended  to  sit  in  a  corporate  data 
center  and  load-balance  devices  such  as  servers, 


intrusion-detection-system  boxes 
and  firewalls. The  product,  which 
can  handle  up  to  64,000  concur¬ 
rent  Layer  4  and  50,000  Layer  7 
sessions  per  second,  is  a  lower- 
end  version  of  the  Alteon  Web 
Switch  family,  which  supports 
more  than  100,000  concurrent 
Layer  4-7  sessions. 

For  load  balancing  at  the  enter¬ 
prise  edge,  Nortel  introduced  Al¬ 
teon  Link  Optimizer,  a  device  that 
sits  in  front  of  a  firewall  and  con¬ 
nects  to  routers  that  are  hooked 
into  multiple  ISP  or  carrier  links. 
The  device  is  designed  to  redirect 
application  traffic  running  over 
WAN  links  and  determine  the 
least  congested  path  for  applica¬ 
tion  traffic  across  multihomed  T-l, 
T-3  or  ATM  connections. 

With  its  Alteon  product  line,  Nortel  has  excelled  in 
the  market  for  appliances  that  direct  and  acceler¬ 
ate  traffic,  according  to  Infonetics  Research.  The 
company  is  among  the  top-three  Layer  4-7  switch 
vendors,  and  it  led  the  market  for  Secure  Sockets 
Layer  hardware  acceleration  devices  in  the  first  half 
of  2002. 

The  Passport  8600  3.3  software  is  a  free  upgrade 
for  customers  with  existing  support  contracts.  A 
Passport  8600  switch  configured  with  a  10G 
Ethernet  WAN  connection  starts  at  $96,000,  and  a 
LAN-configured  10  Gigabit  chassis  costs  $76,000. 
The  Alteon  Application  Switch  2224  costs  $28,000, 
and  the  Link  Optimizer  costs  $15,000  for  Gigabit 
Ethernet  and  $10,000  for  Fast  Ethernet  connections. 
The  two  new  Alteon  products  will  be  available  later 
this  month.  ■ 


New  software  for  Nortel's  Passport 
8600  switch  allows  support  for 
both  WAN  and  LAN  10G  Ethernet 
Modules. 


As  the  world  leader  in  Internet  security,  Check  Point’s™  integrated  security  solutions  Connect,  Protect, 
Manage  and  Accelerate  the  network  security  of  more  than  1 00  million  users  worldwide. 


CONNECT.  Leading  global  companies  rely  on  Check  Point  VPN 
solutions  to  connect  employees  and  offices  everywhere.  Regardless  of 
where  business  happens— even  in  the  most  remote  locations— people 
and  companies  are  securely  connected  to  their  critical  information. 


PROTECT.  Check  Point’s  fail-safe  firewall  infrastructure  provides 
the  highest  level  of  security  for  every  network  from  the  edge  to  the 
core.  Our  authentication,  access  control,  and  content  security  features 
have  become  the  trusted  global  industry  standard. 


MANAGE  Check  Point’s  revolutionary  Security  Management 
Architecture  (SMART-)  lets  you  instantly  deploy  and  distribute  security 
policies  regardless  of  user  location.  All  aspects  of  network  security  can 
be  defined  and  managed  from  a  single  console  dramatically  reducing 
your  total  cost  of  ownership. 


ACCELERATE.  Check  Point’s  VPN  and  firewall  solutions  deliver 
wire-speed  performance  up  to  three  times  faster  than  other  network 
solutions.  Now  you  can  maintain  absolute  network 
security  without  sacrificing  the  performance  of  business- 
critical  applications  or  bogging  down  your  network. 


Check  Point' 
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Find  out  the  latest  in  Internet  security  by  downloading  our  white  paper  “Building  Secure  Wireless  LANs” 
at  www.checkpoint.com/wireless/nww  or  call  (866)  488-6686. 
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VC  start-up  funding  down  again 


Network  start-up  funding  hits  four-year  low 

Investment  declines  21%,  deals  down  15%. 


Funding  in  billions  $16.2 
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■  BY  CAROLYN  DUFFY  MARSAN 

Venture  capital  investments  in  network  start-ups 
continued  a  two-year  downward  spiral  during  the 
third  quarter,  dropping  to  the  lowest  levels  since 
early  1998. 

That’s  the  finding  of  a  special  analysis  of  the  quar¬ 
terly  MoneyTree  Survey  compiled  [ox  Network  World 
by  PricewaterhouseCoopers,  Venture  Economics 
and  the  National  Venture  Capital  Association. 

The  survey  found  that  venture  capitalists  invested 
$2.3  billion  in  345  network  start-ups  during  the  sum¬ 
mer,  down  21%  from  the  $2.9  billion  invested  in  the 
previous  quarter.The  third-quarter  investment  levels  is 
86%  below  the  peak  of  the  'Net  investment  boom, 
when  venture  capitalists  poured  $16.3  billion  into 
1 , 107  network  start-ups  in  the  second  quarter  of  2000. 

Software  companies  continued  to  dominate 
investments,  representing  more  than  half  of  the  network 
industry  deals  completed  in  the  third  quarter.The  num¬ 
ber  of  software  deals  was  four  or  more  times  those  com¬ 
pleted  in  other  areas,  including  IT  services,  network 
equipment,  semiconductors,  telecommunications  and 
computer  systems.  The  most  popular  areas  for  software 
investment  continue  to  be  network  security  and  storage. 

Experts  say  the  decline  in  investment  in  network  start¬ 
ups  is  the  result  of  the  overall  economic  downturn,  which 
began  in  the  second  quarter  of  2000.The  third  quarter  of 
2002  was  particularly  hard  hit  by  stock  market  volatility, 


weak  corporate  earnings,  and  dormant  IPO  and  acquisi¬ 
tion  markets. 

“Communications  companies  aren’t  buying  anything,” 
says  Tracy  Lefteroff,  global  managing  partner  of  the  ven¬ 
ture  capital  practice  at  PricewaterhouseCoopers. 
“Corporate  capital  budgets  have  been  cut.  Network 
equipment  vendors  are  dying  on  the  vine,  announcing 
rolling  rounds  of  layoffs.  And  I  don’t  think  we’ve  seen  the 
bottom  yet.” 

While  overall  investments  are  down  significantly, 20  net¬ 
work  start-ups  managed  to  receive  cash  infusions  of  $20 


million  or  more. The  largest  deal  was  a  $62  million 
first-round  investment  in  Exigen,  a  San  Francisco 
provider  of  business  process  software  for  the  insur¬ 
ance,  banking  and  government  industries. 

Other  major  deals  include  a  $45  million  invest¬ 
ment  in  Hatteras  Networks,  a  Durham,  N.C.,  provider 
of  last-mile  carrier  access  platforms,  and  a  $34.6 
million  investment  in  Luxn,  a  Sunnyvale,  Calif., 
maker  of  optical  systems  for  service  providers. 

Lefteroff  predicts  the  fourth  quarter  will  see 
another  decline  in  both  the  number  of  deals  and 
dollars  invested.  In  order  to  see  the  venture  market 
turn  around,  Lefteroff  says  corporate  IT  spending 
has  to  start  rising  (see  related  story,  page  24). 

“We  need  to  see  the  businesses  that  have  been  the 
buyers  of  IT  and  networking  equipment  start  to 
increase  their  capital  budgets,”  Lefteroff  says.  “We 
need  to  see  the  overall  economy  improve. ...  A  lot 
of  companies  are  going  to  need  to  see  a  quarter  or  two  of 
sustained  growth  before  they’re  going  to  want  to  put  their 
toes  back  in  the  water.” 

Lefteroff  also  predicts  that  more  venture-funded  net¬ 
work  companies  will  go  out  of  business  in  the  next  six 
months  as  they  deplete  funds  raised  during  late  2000  and 
early  2001. 

“Companies  generally  raise  about  two  years’  worth  of 
mone>(  Lefteroff  says.“I  think  we’ll  see  a  fairly  significant 
amount  of  shutdowns  as  companies  exhaust  all  their 
options,  and  the  venture  guys  give  up.”  ■ 


Polycom,  Radvision  simplify  videoconferencing 


■  BY  JASON  MESERVE 

Fblycom  and  Radvision  are  tak¬ 
ing  steps  to  simplify  videoconfer¬ 
encing  for  network  executives 
and  end  users  with  new  products 
that  are  more  powerful  and  eas¬ 
ier  to  administer  than  previous 
generations. 

First,  Polycom's  new  iPower 
9000  series  expands  on  Picture¬ 
Tel’s  work  on  its  iPower  900 


\  I  / 


■  THIS  WEEK'S  QUESTION: 

Which  company  says  it 
is  betting  $10  billion  on 
what  it  terms  "On- 
Demand"  computing? 

Answer  this  and  rwie  adcftional  questions 
online  and  you  could  wn  $500!  Visit 

Network  World  Fusion  and  enter  2349 
in  the  Search  J»x. 


series,  a  line  of  group  videocon¬ 
ferencing  units  that  come  with  a 
PC  for  sharing  data  and  other 
resources  with  conference  par¬ 
ticipants,  which  Polycom  ac¬ 
quired  last  year.  The  new,  beefier 
9000  series  being  added  to  the 
iFbwer  line  comes  in  two  mod¬ 
els:  a  standard  PC  implementa¬ 
tion  (the  iPower  9800)  and  a  rack- 
mount  unit  available  to  system 
integrators  building  custom 
room  systems. 

Customers  purchasing  the 
iFbwer  9800  instead  of  the  small¬ 
er  900  series  get  a  better-quality 
camera,  and  a  new  keyboard  and 
remote  combination  that  have 
videoconferencing-specific  short¬ 
cut  keys  —  zoom,  pan  and  hang 
up  —  designed  to  make  the  sys¬ 
tems  more  user-friendly,  says  Ned 
Semonite,  vice  president  of  prod¬ 
uct  management  at  Fblycom. 

The  rack-mounted  iFbwer  9000 
Codec  provides  all  the  software 
technology  for  conferencing 
with  multiple  video  and  audio 
inputs,  and  connectivity  to  ISDN 
and  IP  networks. 

Phil  Go,  CIO  for  Barton  Malow.a 
construction  management  firm 
based  in  Michigan,  is  beta-testing 
the  iFbwer  9800  as  part  of  a  cus¬ 


tom-built  conference  room  sys¬ 
tem.  His  colleagues  use  the  sys¬ 
tem  eight  to  12  hours  per  week  to 
speak  with  company  offices  in 
Virginia  and  Maryland. 

“The  wonderful  thing  about  the 
[new]  camera  is  after  a  while 
you  don’t  notice  that  it’s  a  video- 
conferencing  unit,  the  technol¬ 
ogy  is  transparent,”  Go  says.  He 
says  the  new  wireless  keyboard 
with  built-in  short-cut  keys  is  also 
less  obtrusive.  Before,  users  had 
to  select  commands  from  a  pull¬ 
down  menu, making  it  obvious  to 
everyone  in  the  conference  what 
they  were  doing. 

Fblycom  also  says  that  by  the 
end  of  this  month  it  will  offer  a 
$7,000  optional  software  upgrade 
that  will  let  the  iFbwer  line  sup¬ 
port  up  to  12  videoconference 
participants  at  a  time, up  from  the 
current  limit  of  four  or  five. 

The  new  9000  series  goes  up 
against  Tandberg’s  recently 
announced  Director,  a  massive 
conference  room  system  featur¬ 
ing  a  67-inch  flat  touch  screen 
display 

The  iFbwer  9800  costs  $18,000 
fully  configured,  while  the  iFbwer 
9000  Codec  for  system  integra¬ 
tors  costs  $14,000. 


Looking  to  “take  the  science 
project”  out  of  setting  up  a  video- 
conferencing  network,  Radvision 
has  unveiled  Invision,  a  suite  of 
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$56.3 

million 

of  Polycom’s  $106  million 
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network  appliances  that  com¬ 
bine  multipoint  control  units 
(MCU),  gatekeepers  and  gate¬ 
ways  in  one  box.  Previously,  three 
separate  devices  were  needed 
for  the  functions. 

The  first  product  available  in 
the  new  line  is  the  Invision  100,  a 
1U  (1.75-inch-high)  box  support¬ 
ing  both  IP  and  ISDN  connec¬ 
tions,  and  the  ability  to  handle  12 
simultaneous  video  calls  via  the 
built-in  MCU  and  gateway.  Gate¬ 
keeper  functionality  lets  adminis¬ 


trators  set  up  per-call  bandwidth 
limitations,  have  the  system  dial 
out  to  all  participants  at  the 
beginning  of  a  scheduled  call 
and  monitor  ongoing  calls.  In¬ 
vision  also  can  show  a  call  layout 
featuring  up  to  13  different  users 
on  the  screen  at  the  same  time. 

Voice  calls  also  are  supported 
in  the  Invision  line,  including 
H.323-based  voice-over-IP  calls. 
Support  for  Session  Initiation 
Protocol  will  be  available  early 
next  year,  says  David  Sokolic, 
Radvision’s  vice  president  of  mar¬ 
keting.  H.324M  support  for  video- 
conferencing  over  3G  mobile 
networks  will  be  added  at  a  later 
date. 

Radvision,  which  has  OEM 
deals  with  the  likes  of  Cisco,  is  in 
competition  with  Fblycom’s  net¬ 
work  systems  group  in  the  video 
network  market  segment. 

Now  shipping,  the  Invision  100 
comes  configured  with  either 
four  Basic  Rate  Interface  ISDN 
links  or  one  Primary  Rate  Inter¬ 
face  ISDN  link.The  Invision  4 10, a 
bigger  box  with  more  ISDN 
capacity,  will  be  available  in  the 
first  quarter  of  next  year.  Pricing 
for  the  Invision  100  starts  at 
$40,000.  ■ 


Telco  Systems  is  a  major  provider  of  carrier- 
class  transport  and  access  solutions  for  public  and 
private  networks  with  over  30  years’  experience.  The 
solutions  include  a  large  installed  base  of  TDM,  SONET, 
VoIP,  VDSL,  10/100  and  Gigabit  Ethernet  products. 


EdgeGate  CPE: 

CPE  Multi-Service  VoIP  Gateway 

EdgeGate  CPE  is  today’s  most  deployed  fiber-to- 
the-home  solution.  Emerging  service  providers 
count  on  this  single  compact  solution  to  deliver 
voice,  video,  and  data  services  to  residential  and 
small  business  customers.  EdgeGate  CPE  even  has 
an  environmental  control  cabinet  for  applications 
where  it’s  necessary  to  mount  it  outside. 


EdgeGate  CPE  has  up  to  8  Ethernet  ports, 

2  voice  ports,  and  a  100/1000  uplink  making  it 
ideal  for  high-speed  Internet,  video,  and  multi- 
media  applications,  as  well  as  traditional  voice. 
Because  of  its  remote  accessibility,  it’s  fast  and 
simple  to  deploy,  manage,  and  monitor  service 
usage.  Its  compliance  with  multiple  standard 
VoIP  signaling,  such  as  SIP,  MGCP1.0,  and  H.323, 
allows  for  interoperability  with  multiple  vendors. 


Based  in  Foxboro,  Massachusetts,  Telco 
Systems  is  committed  to  leading  the  industry  in 
the  development  of  transport,  access  and  packet 
products  for  carriers’  COs,  Co-Los,  and  POPs,  as  well 
as  enterprise  solutions  for  FTTH,  SOHO,  hospitality, 
education,  and  MTU/MDU.  Integrating  circuit- 
and  packet-switched  technologies  onto  flexible 
platforms  ensures  cost-effective  operation. 


Call  today  to  find  out  why  emerging  service 
providers  are  choosing  Telco  Systems’  EdgeGate 
CPE  for  their  fiber-to-the-home  applications. 


Discover  the  Telco  Systems  difference  today! 
To  save  money  immediately  while  preparing  for 
the  future,  simply  call 

or  visit 
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continued  from  page  9 

tracts  for  spelling  out  obliga¬ 
tions  of  trust  and  liability. 

Bond. Hub  is  built  on  a  hosted 
service  from  vendor  Commu¬ 
nicator,  which  uses  its  Hub  ID 
product  to  link  subsets  of  the 
user  repositories  of  the  eight 
bond  houses.  Former  members 
of  the  electronic-commerce 
team  at  Salomon  Smith  Barney 
founded  Communicator  three 
years  ago. 

Bond. Hub  provides  two  ser¬ 
vices:  It  synchronizes  the  di¬ 
rectories  of  the  insti¬ 
tutions,  and  it  acts  as 
a  proxy  to  match 
identities  and  pass 
encrypted  creden¬ 
tials  between  the 
Web  sites  of  the  institutions. 

The  hub  uses  a  proprietary  pro¬ 
tocol  to  synchronize  user  identi¬ 
ties  from  the  institutions  in  its 
directory,  automatically  adding 
users  who  establish  accounts 
with  two  or  more  of  the  financial 
institutions  or  deleting  users  who 
settle  on  a  single  account  with 
one  institution. 

The  customers,  who  are  looking 
for  research  reports  and  to  buy 
and  sell  bonds,  include  pension 


Mutual  consent 

A  consortium  of  eight  financial  institutions  have  created  a 
single  sign-on  environment  called  Bond. Hub  that  lets  their 
mutual  customers  share  information. 


User  logs  on  with  username  and 
password  to  Lehman  Brothers 
Web  site  and  is  authenticated 
using  its  directory  service. 


0 


User,  who  also  is  a  customer  of  Goldman 
Sachs,  uses  a  customized  button  that 
Bond.Hub  added  to  his  Web  browser  to 
request  access  to  research  report  on 
Goldman  Sachs  site. 


Lehman  Brothers 
directory 


—  Leased  line 

—  HTTP  connection 

—  LAN 
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Lehman  site  passes  an  encrypted  token  carrying 

Bond.Hub  sends  encrypted  CURL 

Lehman  user  ID  information  called  a  CURL  to 

to  Goldman  site,  which  decrypts 

Bond.Hub,  which  decrypts  token,  maps  user’s  Lehman 

token,  authorizes  user  access  and 

ID  to  user’s  Goldman  ID  and  encrypts  in  CURL. 

displays  Web  page  to  user. 

fund  organizations,  investment 
management  firms,  banks,  munic¬ 
ipalities  and  individual  investors. 

In  addition,  the  hub  supports  a 
proprietary  security  credential, 
called  a  cooked  URL  (CURL), 
and  acts  as  a  proxy  that  trans¬ 
ports  encrypted  user  identity 


information  between  the  institu¬ 
tions’  Web  sites  and  Bond.Hub. 
Standard  credentials,  such  as 
Liberty  Alliance  and  SAML, 
eventually  could  replace  CURL, 
according  to  Communicator.  . 

The  hub  maps  the  users  identi¬ 
fication  from  one  site  to  the  user’s 


Comdex 

continued  from  page  9 

At  Comdex,  Buffalo  will  have  a  802.1  lg  demon¬ 
stration.  Sano  says  companies  might  hold  off  on  pur¬ 
chases  until  final  IEEE  ratification,  but  he  predicts 
802. 1  lg  will  be  extremely  popular  in  Buffalo’s  target 
markets. 

“They  will  purchase  the  11  g  products  right  away 
because  they  are  looking  for  a  faster  speed,  with  a 
better  distance  than  1 1  a  products  today  he  says. 

Meanwhile,  chip  maker  Broadcom  is  expected  to 
make  an  802.1  lg  announcement  at  Comdex  and 
demonstrate,  with  several  partners,  some  early 
access  points  and  adapter  cards.  One  of  those  part¬ 
ners  is  expected  to  be  a  major  wireless  LAN  vendor 
that,  like  Buffalo,  focuses  on  the  small-business  and 
home  market. 

“With  1  lg.you  can  upgrade  to  54M  bit/sec, get  the 
same  range  as  1  lb, leave  your  existing  access  points 
in  place  and  upgrade  them  to  11a  later,  when  you 
need  the  extra  capacity’  says  Jeff  Abramowitz, 
Broadcom’s  senior  director  of  wireless  LAN  market- 
ingot's  a  very  clean  message  for  network  managers.” 

Complicating  factors  remain 

But  any  number  of  issues  could  muddy  things. 

For  one  thing,  the  earliest  802.1  lg  products  might 
not  be  able  to  wear  the  802.1  lg  label,  because  the 
IEEE  has  yet  to  put  a  final  stamp  of  approval  on  the 
standard.  Several  observers  say  they  expect  ratifica¬ 
tion  to  take  place  by  March. 

Also  missing  will  be  independent 
interoperability  testing  to  guarantee 
that  one  brand  of  802.  llg  adapter 


card  will  work  with  another  brand  of  access  point, 
especially  if  they’re  using  different  silicon.The  Wi-Fi 
Alliance  (WFA),  which  certifies  wireless  LAN  inter¬ 
operability,  won’t  begin  testing  until  after  the  IEEE 
ratification.  According  to  a  WFA  spokesman, 802.1  lg 
testing  and  certification  will  start  in  the  fourth  quar¬ 
ter  of  next  year. 

Another  complication  is  the  number  of  channels 
that  the  various  wireless  LAN  standards  support. 
802.11b  and  802.1  lg  use  three  channels;  802.11a 
uses  eight.  In  practical  terms,  that  means  more 
802.11a  access  points  can  be  deployed  in  a  given 
area,  to  support  considerably  more  users,  than  is 
possible  with  802.11b  or  802. llg. 

Still  another  drawback  is  that  using  the  2.4-GHz 
band  could  be  as  much  of  a  drawback  as  a  benefit 
for  802.1  lg. “802.1  lg  does  not  do  anything  to  miti¬ 
gate  the  interference  problem  experienced  by  all 
wireless  LANs  at  2.4  GHz,”  Ken  Dulaney  a  Gartner 
analyst,  wrote  in  an  overview  of  802.1  lg  issued  ear¬ 
lier  this  year.  “Baby  monitors,  cordless  phones  and 
Bluetooth  devices  can  all  interfere  with  802.1  lg, 
though  [Orthogonal  Frequency  Division  Multi¬ 
plexing]  is  more  interference-immune  than  other 
modulation  schemes.” 

Dulaney  recommends  that  network  executives 
keep  802.11b  deployment  plans  in  place  over  the 
next  year  at  least, as  802. 1  la  products  mature, and  as 
802.1  lg  products  enter  the  market  and  begin  to 
replace  802.1  lb. After  ratification  and  interoperabili¬ 
ty  certification,  the  company  then  can  specify 
802.1  lg  instead  of  802.1  lb  in  requests  for  proposal. 
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identification  at  another  site, 
which  guarantees  the  institu¬ 
tions  never  see  each  other’s 
data.  And  end  users  need  use 
only  a  toolbar  that  Bond.Hub 
adds  to  their  browser  for  navi¬ 
gating  between  sites. 

“Before  Bond.Hub,  users 
had  to  have  IDs  on  each  site; 
they  had  to  log  in  to  eight  dif¬ 
ferent  sites,”  says  Mike  Bass- 
man,  vice  president  of  fixed- 
income  analytics  for  Lehman 
Brothers.  Bassman  says  single 
sign-on  has  increased  traffic 
to  the  company’s  Web  site. 

Lehman  Brothers  joined  the 
Bond.Hub  consortium  early 
in  2001,  the  same  year  In¬ 
stitutional  Investor  named  the 
company’s  U.S.  fixed-income 
research  team  No.l,  and 
ranked  its  fixed-income  trad¬ 
ing  No.  2.  The  Bond.Hub  con¬ 
sortium  began  in  1999  with 
three  institutions  and  a  hand¬ 
ful  of  customers. 

But  while  Bassman  lauds 
Bond.Hub,  he  says  it’s  had  grow¬ 
ing  pains.  Lehman  spent  nearly 
nine  months  linking  to  Bond. 
Hub,  which  is  priced  a  $100  per 
user,  per  year. 

“Keeping  everything  in  sync 
with  a  proprietary  protocol  re¬ 
quires  a  bunch  of  code,”  Bassman 
says.  “We  had  to  create  custom 
feeds  into  our  [Lightweight 
Directory  Access  Protocol]  direc¬ 
tory  We  had  to  write  code  to  feed 
Bond.Hub  and  sync  the  results 
through  the  entire  system.” 

While  Bond.Hub  shows  the 
promise  of  creating  standards 
to  support  federated  directories 
and  federated  identities,  it 
masks  other  complexities  that 
will  have  to  be  addressed, 
including  contractual  matters 
of  trust  and  liability. 

“The  Liberty  Alliance  and  SAML 
standardize  the  problem  of  link¬ 
ing  identities,”  says  Serge  Shinkar, 
product  manager  for  Hub  ID  at 
Communicator.  “They  provide  a 
flexibility  over  CURL,  but  they 
don’t  address  policies  that  need 
to  be  in  place  among  the  busi¬ 
ness  partners.  They  leave  it  up  to 
the  ID  providers  to  manage  trust 
and  establish  permissions.” 

Shinkar  says  those  are  the  ser¬ 
vices  that  Bond.Hub  provides. 

“The  biggest  thing  is  control: 
Who  has  control,  who  has  owner¬ 
ship  of  the  information,”  he  says. 
“You  need  an  infrastructure  that 
your  information  security  people 
can  trust.”  ■ 
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Five  Palms  Award 


www.scriptlogic.com 


BHS.COM 


Finish  Your  List  Early: 


>  Logon,  logoff  and  shutdown  scripting  >  Install /update  software  packages  >  Create/remove  shortcuts 


FREE  45  day  Download 

©  2002  ScriptLogic  Corporation.  All  rights  reserved.  ScriptLogic  and  the  ScriptLogic  logo  are  registered  trademarks  of  ScriptLogic  Corporation  in  the 
United  States  and  /or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  perspective  owners. 


Centralized  Point  &  Click 

Desktop  Administration  Software 


>  Map  network  drives 

>  Connect  network  printers 

>  Make  registry  changes 


>  Deploy  service  packs  &  patches 

>  Control  Office  open  /save  paths 

>  Create  Outlook  mail  profiles 


>  Enforce  security  policies 

...and  Much  More 

without  visiting  each  desktop  /.; 


Start-up  buys  Shiva  name,  products  from  Intel 

It  also  will  sell  a  VPN  appliance  called  Lan- 
Rover  1010  it  acquired  by  buying  another 
company  it  would  not  name. The  products 
will  come  with  Shiva  VPN  client  software 
for  PCs  and  management  software. 

Shiva  plans  to  put  out  its  first  new  product 
next  year,  according  to  Mark  Silverman,  the 
company's  COO,  but  won’t  detail  its  prod¬ 
uct  road  map  for  two  months. 

Frank  Rondinone,  owner  of  Access2Net- 
works.an  integrator  in  Toronto, says  he  has 
resold  and  installed  the  gear  since  before 
Intel  bought  it.  He  says  the  hardware  and 
software  are  stable  and  reliable,  and  that 
the  management  platform  has  “great 
tools”  for  configuring  the  gear. 

The  initial  offerings  are  the  same  prod¬ 
ucts  Intel  has  sold  to  integrators  and  re¬ 
sellers  that  put  their  labels  on  them. 


PROFILE:  SHIVA 

Newton,  Mass. 
December  2001 
43 

Pierre  McMaster,  CEO, 
founder  of  embedded 
computer  maker  Kontron 

Private,  includes  Intel 
Capital 

LanRover  1010, 3105,3125 
VPN  appliances 

Cisco,  NetScreen,  Nortel, 
SonicWall 

The  company  started  out 
with  the  name  Simple 
Access  but  waited  until  it 
had  the  Shiva  name  before 
making  its  debut. 


Even  though  the  Shiva  name  was  well- 
known  in  the  '90s,  the  company  has  an 
uphill  fight,  industry  experts  say 

“It’s  tough  to  differentiate  yourself  in  this 
market,”  says  Deb  Mielke,  principal  with 
Treillage  Network  Strategies. 

Silverman  gives  Shiva  a  short  time  frame 
to  make  an  impact.  He  says  he  expects  that 
within  three  years,  there  will  be  two  or  three 
major  VPN  appliance  vendors. 

Shiva  will  focus  on  IP  Security  VPNs, 
Silverman  says,  but  the  company  also  has 
bought  firewall  and  Secure  Sockets  Layer 
technology  with  the  acquisition  of  Galea 
Secured  Networks. 

The  LanRover  3105  sells  for  $2,000  and 
supports  100  simultaneous  VPN  tunnels, 
while  the  LanRover  3125  costs  $10,000 
and  supports  10,000  tunnels.  By  contrast, 
Avaya's  VSU  100R  appliance  costs  $2,000 
and  supports  100  tunnels,  and  Cisco's  VPN 
3000  concentrator  costs  $4,000  and  sup¬ 
ports  up  to  10,000  tunnels. 

While  Intel  would  not  reveal  the  terms  of 
the  purchase, Shiva  says  Intel  Capital  is  one 
of  the  backers  of  the  deal.  Intel  says  it  main¬ 
tains  equity  in  the  company.  ■ 


Location: 

Founded: 

Employees: 

Key 

personnel: 

Funding: 
Products: 
Competitors: 
Fun  fact: 


■  BY  TIM  GREENE 

NEWTON,  MASS.  —  Remember  Shiva? 
It’s  back. 


A  start-up  making  an  entry  into  the 
crowded  field  of  firewall/VPN  appliances 
has  bought  the  name,  logo  and  two  mod¬ 
els  of  VPN  boxes  from  Intel,  which  has 


owned  Shiva  since  1998  when  it  pur¬ 
chased  the  company  for  $185  million. 

The  new  Shiva  will  sell  the  two  VPN  boxes 
under  the  names  LanRover  3105  and  3125. 


Complete  SAN  LAN  performance  tools. 

Finisar  has  been  offering  its  customers  the  tools  necessary  to  increase  efficient 
network  operation  for  over  14  years.  Finisar’s  family  of  network  analysis  and 
performance  testing  products  ensure  optimum  performance  through  constant 
monitoring,  measuring  and  analysis;  locating  and  repairing  problems  before 
they  cause  an  impact. 


Listening  to  customer  needs,  we  develop  products  that  are  flexible  and  scalable 
to  grow  and  evolve  with  today’s  SAN  and  LAN  environments.  No  other  company 
offers  products  as  easy-to-use  and  easy-to-implement. 


Take  a  test  drive. 

Remove  the  gridlock  from  your  network.  Test  drive  Finisar  Performance  Tools  at 
www.finisar.com/testdrive 


Boston,  New  York,  Chicago,  Washington  DC,  San  lose  &  Long  Beach 


For  more  details: 


In  a  world  where  it’s  a  different  kind  of  threat  every  day,  you  need  a  different  kind  of  security. 

New  threats  can  blow  through  any  firewall  or  anti-virus  software.  That's  why  we  deliver  seamless  information  protection 
with  centralized  management  for  networks,  servers  and  desktops.  From  proactive  research  and  award-winning  software  to 
24/7  protection  and  response  services,  our  solutions  detect,  prevent  and  respond  to  attacks  and  misuse.  And  it's  all  backed  by 
the  X-Force'“  our  global  protection  services  organization.  Want  to  see  more?  Call  800-776-2362.  Or  visit  www.iss.net/nww. 
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IT  budgets  down,  but  not  demand  for  technology 


Priorities,  priorities 

User  demand  for  new  technology,  such  as 
applications  and  storage,  is  growing 
despite  tight  IT  budgets. 

Applications  (CRM,  ERP,  portals  top  the  list) 


39% 


Systems  (Microsoft  [XP  migration],  hardware  [servers  and  PCs]) 


21% 


Storage  (Data  center,  storage  [SAN,  NAS,  etc.],  disaster  recovery) 


12% 


Networking  (Infrastructure  upgrades,  wireless) 


12% 


Software  infrastructure  (security,  Web  services) 


9% 


Other  [infrastructure,  operations,  outsourcing] 


SOURCE:  GARTNER  AND  SOU  N  D  V  IE  W  T  ECH  N  OLOG  Y  GROUP  IT  DEMAND 
AND  SPENDING  SURVEY 


■  BY  JENNIFER  MEARS  AND 
DENISE  DUBIE 

IT  budgets  continue  to  have  a 
rough  go  of  it,  although  demand 
for  technology  is  beginning  to 
pick  up,  according  to  recent 
spending  surveys. 

The  surveys  —  from  Gartner 
and  Morgan  Stanley  —  found 
growing  optimism  about  an  eco¬ 
nomic  upswing  in  the  next  year 
and  conclude  that  IT  budgets, 
which  faced  drastic  cuts  over 
the  past  two  years,  might  return 
to  a  growth  pattern  by  the  end  of 
next  year. 

“Demand  is  increasing  and  so 
budgets  are  likely  to  catch  up  . . . 
although  it  could  take  six  to  12 
months  to  see  the  spending 
increase,” says  Al  Case, senior  vice 
president  of  product  develop¬ 
ment  at  Gartner  and  co-author  of 
the  Gartner  and  SoundView  Tech¬ 
nology  Group  IT  Spending  & 
Demand  Survey.  “What  [CTOs] 
are  finding  is  that  budgets  are  not 
growing  as  fast  as  the  demand  or 
requirement  for  new  technology 
is  increasing.” 


According  to  Case,  the 
biggest  areas  for  spending 
are  in  security  integration 
of  Web  applications,  stor¬ 
age  and  PDAs,  and  wireless 
devices.  Spending  is  ex¬ 
pected  to  increase  in  2003 
on  desktop  and  portable 
computers  as  companies 
look  for  upgrades,  and  on 
in-house  application  devel¬ 
opment  as  the  need  to  inte¬ 
grate  applications  grows. 

Gartner  and  SoundView 
surveyed  846  IT  users  and 
business  executives  res¬ 
ponsible  for  more  than  $33 
billion  in  spending  during 
Gartners  Symposium/IT- 
xpo  last  month. The  survey 
found  that  U.S.  companies 
increased  IT  spending  just 
.36%  this  year  compared 
with  2001,  down  from  last 
year’s  estimate  that  budgets 
would  be  up  by  1.5%  this  year.  For 
next  year,  IT  budgets  are  expect  to 
stay  flat,  the  survey  says. 

Financial  services  giant  Morgan 
Stanley  found  a  similar  decline  in 
IT  budgets,  with  32%  of  225  CIOs 


surveyed  revising  their  IT  budgets 
downward  since  the  beginning  of 
the  year.  Thirty-eight  percent  ac¬ 
knowledged  downgrading  bud¬ 
get  forecasts  in  August. 

Morgan  Stanley  performs  its  CIO 


Survey  Series  10  times  per 
year,  and  the  most  recent 
findings  show  CIOs  plan  to 
spend  less.  Sixty-eight  per¬ 
cent  of  respondents  indi¬ 
cated  they  would  spend 
the  same  or  less  on  net¬ 
work  equipment  in  2003, 
compared  with  their 
spending  this  year.  But  31% 
said  spending  would  in¬ 
crease  in  2003. 

Similar  to  the  Gartner 
survey,  Morgan  Stanley 
found  that  CIOs  place 
application-integration 
security  software  and  Win¬ 
dows  2000/XP  upgrades  as 
their  top  spending  priori¬ 
ties  in  2003. 

As  for  the  economic  out¬ 
look,  financial  services 
firm  Merrill  Lynch  found 
that  53%  of  100  CIOs  sur¬ 
veyed  expects  the  econo¬ 
my  to  pick  up  by  the  end  of  the 
second  quarter  next  year.  But  47% 
said  they  don’t  expect  the  eco¬ 
nomic  upturn  to  happen  until  the 
second  half  of  2003  or  later. 
Ninety-five  percent  of  those  sur¬ 


veyed  by  Morgan  Stanley  said 
they  expect  the  economy  to  re¬ 
cover  in  2003,  up  from  52%  who 
said  the  same  in  June.  And  75%  of 
Gartner/SoundView  respondents 
said  they  expect  a  modest  recov¬ 
ery  in  2003. 

In  the  meantime.  IT  budgets  will 
remain  tight. 

“Things  are  getting  tight  with  a 
big  push  to  cut  any  and  all  opera¬ 
tional  expenses  possible,  without 
impacting  service  levels  or  major 
integration  and  [Health  Insurance 
Portability  and  Accountability 
Act] -compliance  initiatives,”  says 
Mark  Hoffman,  application  sys¬ 
tems  architect  at  Tufts  Health  Plan 
in  Waltham,  Mass.“Management  is 
looking  at  everything  from  who 
should  have  cell  phones  or  DSL 
access,  to  organizational  restruc¬ 
turing  to  more  effectively  deploy 
our  soft  assets  to  match  our  evolv¬ 
ing  business  models. 

“It’s  going  to  be  a  pretty  interest¬ 
ing  200.3,”  he  says.’The  push  to  do 
more  with  less  is  clear" 

IT  Spending  &  Demand  Survey: 
www4.gartner.com/l_research 
analysis/itspending_surveyjsp 


XML-based  security  protocol  wins  key  approval  from  OASIS 


Identity  exchange 


The  Security  Assertions  Markup  Language  1.0,  which  was 
ratified  last  week  by  the  Organization  for  the  Advancement 
of  Structured  Information  Standards,  is  a  key  standard  that 
let  corporations  share  authentication  and  authorization 
data  across  their  boundaries. 
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Browser  user  requesting 
access  to  data  on  business 
partner  site  authenticates 
to  Server  A  within  his  own 
company,  which  creates  a 
SAML  assertion  that  is 
stored  on  Server  A. 


© 


User  request  is  redirec¬ 
ted  to  Server  B,  which 
receives  request  with  an 
attachment,  called  an 
artifact,  that  references 
the  SAML  assertion  on 
Server  A. 


0e  o  0 

Server  B  sees  Server  B  checks 


artifact  and 
sends  request 
to  Server  A  to 
get  full  SAML 
assertion. 


assertion  and 
either  validates  or 
rejects  user’s 
request  for  access 
to  database. 


■  BY  JOHN  FONTANA 

An  XML-based  protocol  that  is 
destined  to  become  the  building 
block  for  corporate  user-access 
security  products  was  approved 
last  week  by  the  Organization  for 
the  Advancement  of  Structured 
Information  Standards. 

OASIS  stamped  Security  Asser¬ 
tion  Markup  Language  (SAML) 
1.0  as  an  Open  Standard,  the 
group’s  highest  level  of  ratifica¬ 
tion.  SAML  1.0  is  an  XML-based 
framework  for  exchanging  auth¬ 
entication  and  authorization  ere 
dentials  over  the  Web.  The  proto¬ 
col  incorporates  other  standard 
protocols,  including  XML  Signa¬ 
ture,  XML  Encryption  and  Simple 
Object  Access  Protocol  (SOAP). 

SAML  promises  to  give  corpora¬ 
tions  a  way  to  link  disparate  secu¬ 
rity  systems  internally  and  with 
business  partners.  It  would  let 
users  obtain  a  SAML  “assertion” 
containing  user  identity  and 
access  controls  from  one  site  and 
use  it  to  gain  access  to  other  sites 
that  support  the  specification. 

But  more  important,  it  will 
become  the  foundation  for  secu¬ 
rity  services,  including  a  key  to 


building  a  security  infrastructure 
to  support  Web  services. 

“SAML  is  becoming  the  consen¬ 
sus  standard  for  network  security, 
identity  management,  single  sign- 
on  and  role-based  access  con¬ 
trol  (says  James  Kobielus.an  ana¬ 
lyst  with  Burton  Group  and  a 
Network  World  columnist.  “It  is 


one  of  the  fundamental  specs  for 
Web  services  security  The  same 
way  basic  XML  was  fundamental 
to  developing  Web  services,  most 
Web  services  security  protocols 
from  here  on  in  will  leverage  or 
extend  SAML” 

Support  for  SAML  in  products  is 
already  coming  from  vendors 


such  as  Baltimore  Technologies, 
Crosslogix,  Entegrity  Solutions, 
ePeople,  Netegrity  Novell,  Oblix, 
OverXeer,  RSA  Security,  Sigaba, 
Sun  and  Tivoli  Systems. 

The  Liberty  Alliance,  which 
published  a  specification  in  July 
for  creating  standard  network 
identities,  has  embraced  SAML. 

SAML  also  is  being  used  as  part 
of  the  WS-Security  specification 
for  securing  Web  services.  The 
specification,  developed  by  IBM, 
Microsoft  and  VeriSign,  was  given 
to  OASIS  in  June.  WS-Security  out¬ 
lines  how  to  integrate  disparate 
security  credentials  such  as 
Kerberos,  public-key  infrastruc¬ 
ture  and  SAML,  using  a  set  of 
extensions  to  SOAP  WS-Security 
will  let  Web  services  pass  secure 
and  signed  messages. 

Work  already  is  under  way  to 
build  on  the  1.0  specification. 

Marc  Chanliau,  senior  product 
manager  for  XML  technologies 
for  Netegrity,  who  helped  develop 
the  protocol,  says  Version  2.0  will 
add  features  for  creating  sessions 
that  foster  secure  transactions. 

“Today,  SAML  doesn’t  tell  you 
when  someone  logs  out,” 
Chanliau  says.The  session  feature 


will  create  a  single  sign-out  tech¬ 
nology  he  says. 

“When  a  user  doesn’t  sign  out, 
you  are  left  with  a  dangling  trans¬ 
action,  and  that  is  not  secure,” 
Chanliau  says. 

He  says  he  expects  the  Liberty 
Alliance  to  develop  extensions  to 
SAML,  especially  identity  attribut¬ 
es  that  can  be  used  to  control  a 
user’s  access  and  actions.  For 
example,  an  attribute  might 
describe  a  user  as  a  purchasing 
agent  with  rights  to  buy  up  to 
$10,000  worth  of  goods. 

“Authorization  attributes  can  be 
used  with  rules  to  control  what 
users  can  do,”  Chanliau  says. 
“SAML  can  make  authorization 
decisions  on  the  fly  using  those 
attributes.”* 


Corrections 


■  In  the  NetResults  graphic  of  the 
review  on  Gigabit  intrusion-detection 
systems  (Nov.  4,  pag:  48),  as  a  con 
to  the  htnAtert  Networks  product  ine, 
it  should  have  stated  that  AicrtViewer  is 
sluggish  under  a  100, 000-alert  load. 


www.nwfusion.com 
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■  TCP/IP,  LAN/WAN  SWITCHES 

■  ROUTERS  ■  HUBS 

■  ACCESS  DEVICES  B  CLIENTS 

B  SERVERS  B  OPERATING  SYSTEMS 
B  VPNS  B  NETWORKED  STORAGE 


Takes 


■  Sistina  Software  has  developed 
a  clustered  file  system  product 

called  Global  File  System,  which 
lets  a  single  application  such  as  a 
database  run  on  more  than  one 
physical  server,  and  share  data  and 
computing  resources  between  those 
servers  as  if  it  were  one  system.  In 
GFS  Version  5.1  for  IBM’s  /Series 
mainframe,  the  software  will  link  an 
application  to  numerous  virtual 
servers  on  the  mainframe.  Similar 
software  has  been  a  crucial  feature 
in  IBM's  age-old  mainframes,  running 
the  OS/390  operating  system.  Sistina 
has  enlisted  Mainline  Information 
Systems,  a  systems  integrator  that 
sells  a  large  number  of  IBM’s  zSeries 
mainframes,  to  help  customers 
implement  the  clustered  file  system 
software. 

IBM  makes  its  own  clustered  file 
system  software.  However,  it  is  more 
suited  for  running  applications  on 
multiple  Intel-based  servers,  Sistina 
executives  say.  Sistina's  GFS  Version 
5.1  for  the  Mainframe  is  in  beta  test¬ 
ing  and  should  be  available  by  year- 
end.  Pricing  wasn’t  announced. 
www.sistina.com 

■  Dell  recently  introduced  a  server 
designed  for  file  and  print  sharing, 
remote-office  deployment  and 
remote  management.  The  Dell 
PowerEdge  1600SC,  which  replaces 
the  1400SC  and  1500SC,  is  a 
pedestal- based  server  with  two  Intel 
Xeon  processors.  It  has  SCSI  and 
Integrated  Drive  Electronics  storage 
options  supporting  as  much  as  438G 
bytes  of  internal  storage  and  con¬ 
tains  hot-pluggable,  redundant  power 
supplies  and  drives.  The  server  con¬ 
tains  up  to  4G  bytes  of  memory  and 
offers  remote  management  features. 
The  box  has  an  embedded  Gigabit 
Ethernet  adapter  and  can  come  fac¬ 
tory-installed  with  Windows  2000, 
Microsoft  2000  Small  Business 
Server  or  Red  Hat  Linux.  The  server 
has  been  certified  for  use  with 
Novell  NetWare.  The  Dell  PowerEdge 
1600SC  starts  at  $1,000.  The  1600SC 
is  available  now. 

www.dell.com 


Avaya  looks  to  reinvent  itself 

Reorganization,  new  products  refresh  company’s  convergence  efforts. 


■  BY  PHIL  HOCHMUTH 

BASKING  RIDGE,  N.J.  —  With  its  legacy 
as  a  Bell  spinoff,  Avaya  has  had  to  fight  the 
image  of  being  a  technology  dinosaur  try¬ 
ing  to  compete  with  companies  more 
evolved  for  the  IP  infrastructure  markets. 

In  its  second  year  since  leaving  Lucent, 
the  company  says  it  is  refocusing  its 
efforts  on  converged  IP  hardware  and 
more  flexible  software  products  in  areas 
such  as  CRM  and  advanced  unified  mes¬ 
saging.  Recent  organizational  changes 
and  a  few  sneak  peeks  of  new  converged 
communications  technologies  have  some 
observers  saying  Avaya  can  compete  in 
the  converged  enterprise  market. 

Avaya  was  the  third-leading  seller  of  IP 
telephony  systems  (including  IP  PBXs,  IP 
phones,  software  and  gateway  equip¬ 
ment)  in  the  first  half  of  this  year,  with 
8.5%  of  the  market,  which  is  expected  to 
reach  $1  billion  by  year-end,  according  to 
IDG.  Leading  the  market  was  Cisco  with 
35.6%  of  the  market,  and  3Com  with 
17.8%.  Avaya’s  PBX  rivals  Alcatel,  Nortel 
and  Siemens  ranked  fourth,  fifth  and  sixth 
respectively. 

“We  were  very  late  to  this  party’  Avaya 
CEO  Don  Peterson  said  of  the  IP  tele¬ 


phony  market  while  speaking 
to  a  group  of  Wall  Street  ana¬ 
lysts  last  month  at  the  com¬ 
pany’s  headquarters. 

Avaya  debuted  its  ECLIPS 
(Enterprise  Class  IP  System) 
voice-over-lP  (VoIP)  products 
in  the  fall  of  2000,  while  com¬ 
petitors  Cisco  and  3Com  had 
products  on  the  market  a  year 
before. This  year,  the  company 
debuted  its  next-generation 
line  of  ECLIPS  products  — 
the  Linux-based  S8700  Media 
Gateway  and  S8300  Media 
Server  —  which  have  brought  the  com¬ 
pany  up  to  the  level  of  Cisco. 

“This  is  a  market  space  we  absolutely 
have  to  lead,”  Peterson  said. 

Regrouping  for  growth 

As  a  means  to  that  goal,  the  company 
recently  realigned  itself  into  four  divi¬ 
sions:  the  Converged  Systems  and  Ap¬ 
plications  Group,  which  includes  all  TDM 
and  IP  hardware  and  software;  the  Small 
and  Medium  Business  Group;  Avaya 
Services  Group;  and  its  Connectivity 
Solutions,  which  includes  its  cabling 
business. 


By  bringing  its  PBX  and 
TDM  voice,  IP  LAN  switching, 
VPN,  wireless  and  CRM  appli¬ 
cations  under  one  umbrella, 
Avaya  now  has  one  sales, 
marketing,  and  research  and 
development  group  responsi¬ 
ble  for  all  its  large-enterprise 
products.This  is  an  important 
step  if  the  company  aims 
to  dethrone  the  likes  of  Cisco 
and  3Com  from  the  top  of 
the  IP  telephony  market,  ana¬ 
lysts  say. 

“Creating  one  business  unit 
for  both  voice  and  data  makes  a  lot  of 
sense  for  Avaya,”  says  Brian  Riggs,  senior 
analyst  with  Current  Analysis.  “It’s  some¬ 
thing  they  needed  to  do  for  a  while.” 

Having  all  voice  and  video  products 
under  one  group  will  help  the  company 
streamline  its  sales  and  support  opera¬ 
tions  while  letting  the  company  develop 
better  convergence  products,  Riggs  says. 

“Avaya  has  been  mixing  and  matching 
voice  and  data  products,  but  they  still  had 
separate  divisions  with  different  cultures 
that  didn’t  talk  to  each  other  that  much,” 
he  says. 

See  Avaya,  page  28 


Mike  Thurk  leads 
Avaya's  Converged 
Systems  and 
Applications  Group. 


Sun  takes  aim  at  mainframe  users 


■  BY  DENI  CONNOR 

Sun  is  luring  mainframe  customers  away 
from  IBM  with  expanded  software  and 
services  that  the  company  says  let  them 
rehost  COBOL  and  Customer  Information 
Control  System  applications  on  less- 
expensive  Sun  servers. 

The  company  announced  professional 
services  and  two  software  packages  — 
Sun  Mainframe  Transaction  Processing 
Software  8.0  (SunMTP)  and  Sun  Main¬ 
frame  Batch  Manager  Software  10.0 
(SunMBM)  —  that  let  customers  migrate 
their  legacy  CICS,  COBOL  and  batch  appli¬ 
cations  to  Sun’s  powerful  Sun  Fire  12000 
or  1 5000  servers. 

SunMTP  lets  customers  reuse  transac¬ 
tion-processing  applications  written  in 
COBOL  or  PL/1.  It  includes  a  VSAM 
indexed  sequential  file  system  and  inter¬ 
faces  to  DB2  or  Oracle  databases. 
SunMBM  is  a  batch  job  execution  system 


Big  code 

Sun  claims  it  has 
migrated  more  than 

500  million 

lines  of  code  off  IBM  mainframes 
with  its  Mainframe  Rehosting 
software  and  services. 


that  supports  Job  Control  Language  trans¬ 
lation  and  coexisting  with  Java  technol¬ 
ogy  With  SunMTP  and  SunMBM,  applica¬ 
tions  will  require  recompiling,  but  are  not 
run  as  emulation  tasks,  thus  speeding 
application  performance. 

Analysts  say  that  as  fewer  new  applica¬ 
tions  are  being  written  for  mainframes 
and  as  fewer  experienced  mainframe  pro¬ 
grammers  are  available,  Sun’s  Mainframe 


Rehosting  Software  is  attractive. 

“Sun  is  looking  at  IT  shops  that  are  faced 
with  a  decision  of  staffing,  support  and 
application  availability  as  customers  for 
its  rehosting  products,”  says  Vernon  Turner, 
research  director  at  1DC.  “There  has  been 
almost  40  years  of  mainframe  application 
development,  and  some  of  those  applica¬ 
tions  are  clearly  still  useful. There’s  a  lot  of 
CICS,  for  example,  still  hanging  around.” 

One  large  insurance  company  has  seen 
the  positive  effects  of  migrating  its  main¬ 
frame  applications  to  Sun  Fire  servers  run¬ 
ning  Solaris. 

Transamerica  Life  of  Canada  faced 
having  to  migrate  a  mainframe-based  ap¬ 
plication  and  data  to  a  Sun  platform  when 
it  acquired  NN  Life  Insurance  Company  of 
Canada. 

“We  looked  at  the  cost  of  ownership 
issues  in  keeping  the  mainframe  going  \  ‘ 
ward]  and  found  that  the  outsourc 

See  Sufi,  page  > 
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Server  appliances  die  a  quiet  death 


■  BY  ASHLEE  VANCE 

Vendors  selling  server  appliances  pro¬ 
mised  customers  they  could  have  a  box 
up  and  running  in  15  minutes.Well,forthe 
vendors,  their  15  minutes  of  fame  are  up. 

Dell,  Hewlett-Packard,  IBM  and  Sun  all 
rode  the  server  appliance  bandwagon, 
billing  their  special-purpose  servers  as  the 
quick  fix  for  customers  with  complex, 
expanding  data  centers.  The  server  mak¬ 
ers  rolled  out  product  after  product  to  fill 
their  appliance  arsenal  and  grab  sales 
ahead  of  the  competition.  However,  most 
of  these  companies  have  since  trimmed 
their  appliance  lines  with  even  greater 
speed  and  much  less  fanfare  than  their 
product  launches. 

HP  provides  the  most  recent  example  of 
an  appliance  vision  gone  awry  The  com¬ 
pany  arrived  late  to  the  appliance  party, 
bringing  out  its  first  products  in  April  of  last 
year.  To  make  up  for  its  late  entry  into  the 
market,  HP  unveiled  19  different  server 
appliances  for  handling  everything  from 
caching  to  application  serving  and  touted 
strong  partnerships  with  Intel  and  Inktomi 
as  proof  the  new  product  line  would  thrive. 

After  completing  its  acquisition  of 
Compaq  in  May,  HP  changed  course  and 
killed  off  both  its  new  appliance  line  and 


■  BY  DENI  CONNOR 

Brocade  Communications  has  been  ru¬ 
mored  to  be  on  the  acquisition  hunt  since 
Cisco  announced  its  acquisition  of  An- 
diamo  Systems’  director-level  Fibre  Chan¬ 
nel  switches. 

Last  week  those  rumors  became  reality 
as  the  Fibre  Channel  switch  vendor  said  it 
would  acquire  start-up  Rhapsody  Networks 
for  $175  million.  Rhapsody  while  not  hav¬ 
ing  announced  any  products  yet,  is  known 
to  be  making  director-level  switches  that 
will  host  applications  such  as  virtualization 
and  replication  software.  Brocade  will  inte¬ 
grate  Rhapsody’s  applications-based  multi¬ 
protocol  director-level  switching  technol¬ 
ogy  into  its  corporate  storage  products. 

“There  is  increased  pressure  on  Brocade 
to  do  more  [in  this  area]  and  accelerate  its 
technology  quickly  if  it  is  going  to  compete 
against  Cisco," says  Jamie  Gruener,  a  senior 
analyst  with  The  Yankee  Group. 

Brocade  leads  the  market  in  entry-  and 
midlevel  fabric  switches,  but  trails  McData 
and  inRange  in  the  director-level  area, 
according  to  IDC.  A  year  ago,  Brocade 
announced  a  128-port  director-level  switch 
of  its  own,  which  it  shipped  earlier  this  year 
and  positions  in  this  high-end  market. 

However,  sources  say  the  company  has 
been  more  concerned  about  the  effect 
Cisco’s  entry  will  have  on  the  Fibre 


an  older  set  of  products  that  Compaq  sold 
under  the  TaskSmart  brand.  Experiencing 
“minuscule”  sales  with  its  server  appliance 
products,  HP  has  decided  to  pitch  more 
general-purpose  servers  to  customers 
instead,  says  Hugh  Jenkins,  vice  president 
of  marketing  at  HP 

“Maybe  this  was  some  mismarketing  on 
the  industry’s  part,”  Jenkins  says.  “There 
was  an  aura  that  appliances  would  be 
simple,  like  a  toaster  simple,  when  in  fact, 
the  types  of  tasks  appliances  were  used 
for  required  a  hell  of  a  lot  of  consulting. 

“I  think  we  realized  pretty  quickly  into 
starting  to  sell  the  products  that  the  types 
of  applications  [appliances]  were  aimed 
at  did  require  heavy  lifting.  I  guess  we  are 
not  the  only  company  that  has  found  that 
out,”  he  says. 

Other  companies  that  ran  into  lackluster 
appliance  sales  include  IBM,  Dell  and  Sun 
—  which  all  made  early  and  aggressive 


Hewlett-Packard  has  axed  the  Compaq 
TaskSmart  appliance. 


Channel  market  than  on  shipping  products 
into  the  director-level  arena.  Brocade’s 
acquisition  of  Rhapsody,  observers  say 
reflects  a  direct  reaction  to  Cisco’s  entry 
into  a  market  it  plans  to  dominate. 

Cisco  started  its  push  into  storage  net¬ 
working  when  it  launched  its  “Storage 
Networking  Initiative”  in  April  2001.  In 
August,  Cisco  announced  its  intention  to 
buy  Andiamo,  a  manufacturer  of  storage 
switching  products  for  the  storage-area  net¬ 
work  (SAN)  market.  That  same  day  Cisco 
also  announced  that  Andiamo’s  family  of 
multilayer  intelligent  storage  switches  for 
SANs,  expected  to  begin  shipping  before 
year-end, will  carry  the  Cisco  brand, and  be 
known  as  the  MDS  9000  family 

“Cisco  will  offer  incentive  programs  and 
affect  when  customers  purchase  addition¬ 
al  storage  network  gear  based  on  the  fact 
that  a  lot  of  customers  are  waiting  for 
Cisco’s  products  to  come  to  market  and  be 
certified  with  storage  OEMs,”  Gruener  says. 

As  the  result  of  the  acquisition,  Brocade 
will  market  what  it  calls  “application 
switches”  —  Fibre  Channel  switches  that 
work  with  software  and  hardware  from 
OEMs  and  software  vendors  that  allow  the 
hosting  of  storage  management,  replica¬ 
tion  and  data  management  applications. 

Brocade  estimates  that  customers  will  be 
able  to  purchase  products  resulting  from 
the  acquisition  by  the  end  of  2003.  ■ 


For  now  the  Sun  Cobalt  RaQXTR  is  aimed  at 
specific  applications  such  as  Web  hosting. 


pushes  into  the  server  appliance  market. 

IBM  acquired  appliance  maker  Whistle 
Communications  in  1999  only  to  retire  the 
products  a  short  time  later.  Dell  launched 
its  FbwerApp  line  in  April  2000  and  then 
shelved  the  systems  and  now  sells  appli¬ 
ance  software  for  its  mainstream  server 
line.  For  its  part,  Sun  completed  a  $2  bil¬ 
lion  acquisition  of  appliance  leader 
Cobalt  Networks  in  2000  to  help  the  com¬ 
pany  tap  the  low  end  of  the  server  market. 
Sun  has  since  shifted  its  strategy  to  focus 
more  on  general-purpose  Linux  servers. 

All  these  vendors  say  they  hoped  to  cash 
in  on  the  idea  of  a  fixed  function  server 
that  shipped  with  easy-to-use  but  limited 
software.  If  a  customer  needed  to  improve 
network  speed,  then  a  caching  appliance 
or  load-balancing  appliance  would  do  the 
trick.  For  those  dot-coms  with  expanding 
workforces,  an  e-mail  appliance  could  be 
the  answer. 

Marking  the  need  for  appliances,  IDC 
wrote  at  the  time  of  Dell’s  appliance 
launch:  “While  IDC  believes  that  appli¬ 
ance  servers  will  be  used  for  a  number  of 
applications,  the  fastest-growing  segments 
of  the  market  will  be  for  Internet-related 
activities  such  as  Web  serving  and 
caching.  We  anticipate  that  each  of  these 
categories  will  represent  more  than  $1  bil¬ 
lion  in  appliance  server  opportunities  by 
[calendar  year  2004] .” 

Analysts,  like  the  vendors,  have  pulled 
back  on  their  forecasts  for  the  server 
appliance  market,  saying  that  customers 
are  looking  for  general-purpose  servers 


Sun 

continued  from  page  25 

[arrangement]  was  something  we  didn’t 
have  to  afford  on  an  ongoing  basis,”  says 
Naj  Hirani,CIO  for  Transamerica. 

“Our  vision  was  to  integrate  application 
systems  and  consolidate  technology  plat¬ 
forms  to  achieve  cost-effectiveness,  as  well 
as  better  align  application  systems  to  sup¬ 
port  the  Life  and  Investment  products’ 
back-office  operations,”  Hirani  says. 

“Regardless  which  of  the  available  alter¬ 
natives  was  chosen  —  either  outsourcing 
to  another  vendor  or  acquiring  and  imple¬ 
menting  a  mainframe  platform  in-house  or 
rehosting  the  application  on  to  another 
platform;  together  with  reducing  costs  —  it 
had  to  be  seamless  to  the  business  users 
[meaning  no  change  to  the  system  and  fea¬ 
tures],  "he  says. 

Hirani  signed  up  with  Sun  for  its  main¬ 
frame  rehosting  products  to  assist  in  the 


instead.  More  flexible  servers  fit  in  well 
with  the  new  network  architectures  being 
proposed  by  IBM, Sun  and  HP  that  require 
applications  to  be  moved  from  server  to 
server  in  an  automated  fashion. 

“By  and  large  what  we  are  moving 
toward  is  something  I  like  to  refer  to  as  a 
soft  appliance,”  says  Gordon  Haff,  an  ana¬ 
lyst  at  Illuminata.The  types  of  provision¬ 
ing  software  being  rolled  out  requires  a 
general-purpose  pool  of  hardware  that 
you  turn  into  special  purpose  boxes 
through  software.  Then,  you  can  change 
these  functions  as  you  need.” 

Sun’s  server  strategy  backs  up  this  claim. 

The  company  will  continue  to  sell  its 
Cobalt  products  but  also  has  moved  the 
software  for  these  systems  to  its  Sun  LX50 
general-purpose  server.  The  LX50  runs 
Linux,  an  operating  system  introduced  to 
Sun  by  the  Cobalt  team,  and  the  appli¬ 
ance  management  console,  says  Peder 
Ulander,  director  of  marketing  for  the  vol¬ 
ume  systems  products  at  Sun. 

Sun  also  will  release  new  software  pack¬ 
ages  for  its  LX50  server  next  month  at 
Comdex,  hoping  to  provide  customers 
with  “appliance-like"  general-purpose 
servers.  Still,  even  Sun,  which  stands  by  its 
appliance  line,  says  its  Cobalt  Qube  and 
RaQ  appliance  products  might  take  on  a 
new  form.  Ulander  says  the  product  lines 
will  survive  but  added  that  he  could  not 
say  exactly  “what  form  factor  and  what 
direction”  Sun  might  take. 

IBM  and  Dell  still  sell  appliancelike 
products  that  are  general-purpose  servers 
loaded  with  various  software  packages. 
However,  these  systems  do  not  resemble 
the  fixed-function  boxes  promised  in  the 
appliance  heyday. 

Vance  is  a  correspondent  with  the  IDG 
News  Service ’s  San  Francisco  bureau. 


migration  of  the  mainframe  applications 
and  data. 

“When  we  compared  our  systems  opera¬ 
tion  costs  of  the  mainframe  vs.  hosting  the 
applications  on  the  Sun  platform,  we 
achieved  upwards  of  a  50%  cost  savings.” 

Sun  has  added  authentication-based 
security  to  the  products  and  the  ability  to 
cluster  servers  with  Sun  Cluster  server  clus¬ 
tering  software.  Further,  it  has  increased  the 
interoperability  between  Enterprise  Java 
Beans-enabled  and  legacy  applications. 
The  software  now  can  be  managed  from 
any  point  on  the  network. 

The  company  says  that  while  its  software 
is  unique  for  the  Solaris  platform,  there  are 
a  few  rehosting  packages  for  the  IBM 
zSeries  servers.  The  company  says  emula¬ 
tion  programs  are  available  from  vendors 
such  as  Acucorp’s  Acucobol  or  Century 
Software’s  emulation  tools. 

The  software  can  start  for  $100,000  and  is 
available  now.  ■ 


Brocade  lands  Rhapsody 


So  many  network  applications. 
So  little  throughput. 

It’s  time  for  Gigabit  to  the  desktop. 

The  surge  in  network  applications  has  caused  bottlenecks  on  desktops  everywhere.  The  solution?  Help  your 
organization  tackle  all  those  network  backups,  remote  software  distributions  and  massive  file  downloads  by 
providing  an  equally  massive  increase  in  throughput.  With  the  Intel®  PRO/IOOO  MT  Desktop  Connection, 
you’ll  benefit  from  10  times  the  throughput.  Other  advantages:  a  Gigabit  connection  works  on  an  existing 
10/100  Mbps  Cat-5  network,  and  will  seamlessly  ramp  up  to  1000  Mbps.  When  this  Gigabit  connection 
is  combined  with  the  Intel®  Pentium®  4  processor,  studies  have  demonstrated  a  significant  boost  in  desktop 
irformance.  Intel,  the  leader  in  desktop  connections,  makes  multi-tasking  less  of  a  task  —  cost-effectively 
and  without  any  need  for  expensive  rewiring.  Intel®  PRO  Network  Connections.  The  intelligent  way  to  connect. 


For  a  trial  kit,  product  and  test  information:  www.intel.com/go/desktopgig 
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The  relationship  we  enter  into  with 
our  network  equipment  suppliers 
can,  and  sometimes  does,  resemble 
a  marriage.  Indeed,  some  of  us  might  be 
guilty  of  keeping  our  eyes  open  before 
the  marriage,  and  half  shut  afterward,  as 
Ben  Franklin  used  to  say. 

Our  vendor  “partners"  got  busy  churn¬ 
ing  out  products  that  we  burned  money 
on  in  order  to  plug  into  our  enterprise 
networks  because  we  bought  into  their 
plans.  Left  out  of  the  equation  was  any 
internal  analysis  of  what  problem  the 
product  solved  or  what  specific  network 
conditions  we  sought  to  improve  based 
on  performance  measurements.  Network 
infrastructure  became  a  moving  target 
because  of  these  rapid  deployments,  and 
we  amassed  little  real  in-depth  network 
knowledge. 


Avaya 

continued  from  page  25 

With  its  combined  voice/data/applica¬ 
tions  group,  the  company  will  take  a  dif¬ 
ferent  approach  to  its  LAN  switching  and 
data  infrastructure  products,  according  to 
Mike  Thurk,  vice  president  of  Avaya ’s  con¬ 
verged  systems  and  applications  group. 

“Switching  is  an  important  element  of 
an  IP  infrastructure,”  he  says,  but  he  adds 
that  Avaya  will  refocus  its  research-and- 
development  investments  in  some  areas 
of  LAN. 

Thurk  says  new  developments  in 
Avaya’s  Cajun  line  will  focus  on  tech¬ 
nologies  that  enable  IP  telephony  and 
convergence,  such  as  power  over 
Ethernet  and  quality  of  service,  rather 
than  matching  products  feature-for-fea- 
ture  with  competitors  that  compete  sole¬ 
ly  in  the  LAN  switch  market. 

According  to  1DC,  Avaya  ranked  1 1th  in 
the  $15  billion  LAN  switching  market  last 
year  with  1.4%  of  total  worldwide  rev¬ 
enue.  While  LAN  switch  products  raked  in 
$212  million  in  revenue  for  the  company 
in  2001  .that  figure  accounts  for  only  3%  of 
Avaya’s  total  revenue  in  2001. 

Avaya  already  has  integrated  its  LAN 
technology  into  VoIP  gateways,  such  as  its 
S8700  Media  Gateway. Thurk  hinted  that  in 
2003,  other  telephony-like  features  and 
functions  would  be  integrated  into  Cajun 
products,  such  as  distributing  directory 
information  stores  or  even  call-processing 
functions  out  to  wiring  closet  switches. 


Convergence 
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Starting  next  week  in  suburban  Boston 
and  continuing  in  five  other  cities  (New 
York,  Chicago,  Washington,  D.C.,San  Jose 
and  Long  Beach,  Calif.)  across  the  coun¬ 
try  into  December,  The  Tolly  Group  and 
Network  World  will  co-host  our  annual 
State  of  the  LAN  seminar  series.  During 
this  seminar  we  will  explore  today’s 
enterprise  network  demands  and  how 
IT  organizations  can  re-engineer  their 
practices  to  position  themselves  better 
to  provide  superior  network  services. 
(Check  out  our  agenda  and  sign  up  for 
this  free  event  at  www.nwfusion.com, 
DocFinder:  3050.) 

One  key  point  I  will  discuss  lends  itself 
to  the  vendor  marriages  you  might  have 
in  place.  Given  the  current  economic  cli¬ 
mate,  vendors  no  longer  can  push  prod¬ 
uct  on  companies.  Enterprise  network 
executives  must  assess  their  immediate 
and  long-term  needs,  and  vendors  must 
earn  their  way  into  the  network  by  pro¬ 
viding  the  “right”  solution. 

That’s  no  small  feat  for  network  execu¬ 
tives.  It  means  rediscovering  your  net¬ 
work,  knowing  what  you  are  looking  for 
in  products  and  understanding  how  to 


Some  things  Avaya  must  do  to 
keep  competitive  in  the 
converged  enterprise  market. 


Capitalize  on  its  installed  base: 

Avaya  has  the  legacy  of  being  the 
leadingTDM  voice  vendor  from  its 
days  as  the  enterprise  telephony 
products  and  services  arm  of 
Lucent.This  represents  thousands 
of  potential  IP  voice  customers. 

Transform  services  division: 

With  Avaya's  extensive  services 
group,  the  company  has  some  2,500 
technicians  who  could  be  used  in  a 
more  network  consultant  role. 

Do  something  in  data: 

Avaya  must  boost  the  visibilty  of 
its  datacom  products,  which  have 
garnered  praise  from  users,  but 
made  little  market  impact. 


Opening  up  applications 

Avaya’s  application  and  software  roots 
are  in  the  world  of  proprietary  operating 
systems,  TDM  and  circuit  switching.  But 
the  company  says  technologies  such  as 
Java  2  Platform  Enterprise  Edition  (J2EE), 
Web  services  such  as  Microsoft  .Net,  and 
open  standards  such  as  the  Session 
Initiation  Protocol  will  be  major  pieces  of 
Avaya’s  telephony  applications.  Users 
could  expect  to  see  products  incorporat¬ 
ing  these  technologies  starting  in  the  first 
quarter  of  2003,  according  to  Karyn 
Mashima,  senior  vice  president,  strategy 


determine  if  it  exists. 

Rediscovering  your  network  means 
you’ve  got  to  invest  some  time  under¬ 
standing  its  operational  characteristics. 
How  many  errored  frames  are  common 
in  your  transmissions?  What  are  the  net¬ 
work  choke  points?  Where  and  when  do 
you  experience  spikes  in  usage,  and  how 
does  the  network  respond?  What  are 
your  application  characteristics,  and  can 
the  network  support  them  adequately? 

In  this  new  discovery  mode,  structured 
benchmarking  is  essential.  The  struc¬ 
tured  approach  that  I’ll  discuss  at  State 
of  the  LAN  is  applicable  to  any  technol¬ 
ogy,  and  the  aim  to  isolate  specific  ele¬ 
ments  of  the  network  and  pinpoint  per¬ 
formance.  But  to  do  that  with  success, 
you’ll  need  to  follow  a  handful  of  basic 
principles: 

•  Establish  testing  goals.  It  is  important 
to  identify  the  devices  to  be  tested,  but 
more  so,  identify  the  trade-offs  between 
what  data  is  “doable”  to  collect  and  what 
is  desirable. 

•  Implement  a  test  design  methodol¬ 
ogy.  Here  you  need  to  profile  the  major 
elements  to  be  tested  and  develop/deter¬ 


and  technology  at  Avaya. 

Avaya  will  open  its  APIs  for  its  Multi¬ 
vantage  call-processing  software,  which 
runs  on  its  proprietary  PBX  Unix  flavor, 
Intel-based  Linux  and  Windows  NT/2000. 

“We’re  breaking  down  our  software 
products  into  reusable  software  mod¬ 
ules,”  Mashima  says. 

While  Avaya’s  existing  product  line  of 
CRM,  call-processing  and  messaging 
applications  will  stay  on  their  respective 
platforms  and  development  environ¬ 
ments,  she  says, “all  new  applications  will 
be  developed  in  J2EE.” 

As  part  of  this  strategy,  Avaya  is  develop¬ 
ing  what  it  calls  the  Communication 
Application  Server,  which  would  run  on 
top  of  a  J2EE  or  .Net  platform.  From  this 
platform,  Mashima  says,  applications  such 
as  call  processing,  voice  and  e-mail  mes¬ 
saging,  instant  messaging,  and  call  center 
and  CRM  software  can  be  developed  and 
deployed.  Mashima  says  an  upcoming 
version  of  Avaya’s  CRM  and  contact  cen¬ 
ter  suite  will  be  based  on  IBM’s 
Websphere  application  server. 

“Think  of  running  a  Multivantage  PBX 
from  a  BEA  application  server,”  Mashima 
adds. 

Other  products  Avaya  will  roll  out  in 
2003  include  areas  such  as  presence  and 
personal  workspace  technologies,  Mash¬ 
ima  says.  Personal  workspace  technology 
will  involve  the  integration  of  cellular, 
wireless  LAN  and  Bluetooth  technology 
in  IP  desk  handsets,  wireless  handsets  that 
could  let  end  users  move  from  a  cell 
phone  to  an  office  phone  while  transfer¬ 
ring  the  call  between  devices  without 
interruption. 

At  your  service 

Avaya  says  it  will  work  on  transforming 


mine  the  appropriate  criteria  for  evaluat¬ 
ing  them. 

•  You’ll  need  to  conduct  prototype  test¬ 
ing  and  validate  your  results.This  means 
building  a  viable  test  bed  and  creating 
prototypical  tests  to  ensure  that  results 
are  meaningful  and  insightful. 

•  Production  testing  comes  next.  Here 
you  capture,  compile  and  record 
raw  data. 

•  Finally,  you  document  your  data  and 
analyze  it. 

At  our  State  of  the  LAN  events,  you’ll 
hear  representatives  from  leading  com¬ 
panies  such  as  Cisco,  Alcatel,  Extreme 
Networks,  Foundry  Networks  and  Finisar 
discuss  the  latest  trends  in  IP  telephony, 
security,  10G  Ethernet,  quality  of  service, 
storage  networking  and  more. 

Learn  how  these  technologies  all  can 
be  measured  and  analyzed  so  that  you 
maintain  those  vendor  marriages  with 
eyes  wide  open  instead  of  half  shut. 

Tolly  is  president  of  The  Tolly  Group,  a 
strategic  consulting  and  independent  test¬ 
ing  company  in  Manasquan,  N.J.  He  can 
be  reached  at  ktolly@tolly.com. 


its  services  division,  with  more  than  2,500 
technicians,  into  more  of  a  consultancy- 
style  of  operation  instead  of  a  fleet  of 
“phone  guys”  in  white  vans.  Most  known 
for  its  PBX  phone  maintenance  services 
in  companies,  Avaya’s  services  business 
brought  in  about  $2  billion  in  revenue 
(equal  to  its  hardware  and  software  rev¬ 
enue  combined)  in  its  2002  fiscal  year, 
which  ended  in  September. 

Beyond  its  PBX  maintenance  business, 
Avaya  recently  added  assessment  services 
for  companies  in  the  areas  of  IP  infra¬ 
structure  security,  VoIP  and  convergence. 
The  company  is  looking  to  add  out¬ 
sourced  or  managed  telephony  services, 
comparable  to  a  WorldCom  IP  Centrex 
service,  in  the  coming  quarters. 

“Avaya  is  taking  its  support  group  and 
turning  it  into  a  services  group,  which  is 
interesting,”  Current  Analysis’  Riggs  says. 
He  says  that  with  the  tumult  among  carri¬ 
ers  offering  IP  services,  a  managed  tele¬ 
phony  service  based  on  Avaya  equipment 
could  be  successful. 

“They  certainly  have  the  technicians  and 
workforce  to  do  it,”  Riggs  says.  “It  will  be 
interesting  to  see  if  they  can  pull  it  off.”B 


More  online! 


Stay  on  top  of  the  latest  Avaya  business,  product 
and  financial  news. 
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MAKE  SECURITY  YOUR  STRENGTH 


Enlist  a  network  security  system  that  is  as 
much  about  your  ROI  as  it  is  about  deterring 
threats.  With  WatchGuard®  at  the  heart  of  a 
multi-layered  security  system,  you  get  ASIC- 
based  performance — and  when  your  data  is 
protected,  employees  are  more  productive  and 
budgets  are  saved.  So  you  can  concentrate  on 
maximizing  business  potential. 


One  of  the  best  ways  to  spark  ideas  for  better 
security  is  yours  for  free.  Call  1-877-732-8780  or  visit 
www.watchguard.com/guide  to  get  a  complimentary 

copy  of  Better  Security:  A  Practical  Guide. 


WatchGuard 
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Your  existing  phone  system  is  costing  you  more  money 
than  you  think.  To  learn  how  a  Shoreline  IP  Voice  System  can  drastically 
reduce  your  company  phone  expenses  while  adding  more  features  and  solid 
reliability,  call  1-877-80SHORE  or  visit:  http://savings.goshoreline.com 
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Annual  Costs 


Management 

$39,600 

$72,000 

$32,000 

Maintenance  (Based  on  10.1%) 

$48,480 

$129,280 

$80,800 

Long  Distance 

$30,000 

_ $151,000 

$121,700 

TCO  Per  Year 


5118,080  $352,280 


5234,200 


Total  Savings  Over  5  Years 


$1,678,200 


Experio  is  a  global  IT  consultancy  and  unit  of  Hitachi  Ltd.  KJexPeri° 

Shoreline  supports  the  company  with  an  integrated  IP 

voice  system  linking  800  users  and  18  Experio  offices  throughout  the  U.S. 


Per  Site  Aquisition  Costs 

Equipment  Network  Upgrades 
Installation  -  Hard  Costs 
Total  Per  Site  Aquisition  Costs 
Total  Aquisition  Costs  (XI 6) 


SHORELINE 

$30,000 

$0 

$30,000 

$480,000 


LEGACY  PBX 

$60,000 
$1,700 
$61,700 


$987,200 


NET 


SAVINGS 


$30 


000 


700 


$31 


700 


$507,200 


“ Shoreline  reduced  our  system  acquisition  and 
installation  costs  by  more  than  $500K,  and 
helped  us  reduce  our  ongoing  voice  network 
expenses  by  more  than  $200K  per  year.” 

Michael  Shisko,  IT  Director,  Experio  Solutions 


Robust  IP  Phone  Systems 
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FOR  TYING  TELEWORKERS  TO  THE  ENTERPRISE 


New  spins  on  work/life  balance 

Three  firms  offer  clever  remedies  for  traffic  congestion  and  remote  worker  isolation. 


■  BY  TONI  KISTNER 

By  now,  practically  anyone  you  ask  can 
name  at  least  two  or  three  benefits  of  tele¬ 
work.  Although  it’s  a  great  way  to  improve 
worker  productivity,  reduce  company 
costs,  and  decrease  traffic  congestion  and 
car  emissions  in  one  fell  swoop,  telework 
doesn’t  suit  every  situation.  Three  compa¬ 
nies  — ProximateCommute,  Zipcar  and 
SOS  Network  —  have  looked  beyond  the 
home  office  to  develop  alternative  and 
complementary  solutions  to  “traditional” 
telework. 

Swappingjobs 

What  if  your  company  offered  you  the 
same  job  with  the  same  pay  with  half  the 
commute?  That’s  the  idea  behind  Proxim¬ 
ateCommute,  a  firm  that  helps  companies 
with  multiple  locations  rearrange  their  em¬ 
ployees  so  they  work  at  the  branch  closest 
to  home. 

Gene  Mullins  first  came  up  with  this  sim¬ 
ple  concept  while  sitting  in  traffic  on  Inter¬ 
state  5  in  Seattle  in  1992. “1  was  watching 
people  driving  in  opposite  directions  to 
do  similar  jobs.  So  I  went  to  a  local  bank, 
got  the  ZIP  codes  for  the  employees  of 
three  branches  and  plotted  their  com¬ 
mutes  manually.  I  was  right.  Only  17%  of 


employees  worked  at  the  bank  branch 
closest  to  home.” 

When  Mullins  started  pitching  his  idea  to 
Seattle-area  companies,  he  thought  middle 
managers  would  be  the  hardest  sell, assum¬ 
ing  they’d  argue  that  they  work  hard  to  get 
teams  to  work  well  together.  But  in  fact, 
they  wanted  it  most.They’re  the  ones  deal¬ 
ing  with  employees  who  are  unhappy  who 
are  late,  who  quit,  and  who  need  to  take  a 
full  day  off  to  take  their  kids  to  the  doctor. 
They  understood  immediately  the  value  of 
having  employees  working  close  to  home,” 
he  says. 

Although  Mullins  won’t  offer  details,  he 
says  he’s  putting  the  finishing  touches  on 
ProximateCommute  Online,  a  systems- 
based  application  that  lets  employees  log 
on  and  search  for  similar, shorter-commute 
jobs  with  the  same  employer. The  program 
maps  and  details  their  current  commute 
time,  distance,  cost  and  pollution  gener¬ 
ated,  and  compares  those  with  the  shorter 
commutes  identified  by  the  program. 

ProximateCommute  is  an  excellent  solu¬ 
tion  for  workers  who  can’t  do  their  jobs  at 
home.  Mullins’  first  clients  were  Puget 
Sound  Bank  and  Key  Bank,  which  merged 
during  this  project.  Even  with  internal  turf 
struggles,  Mullins  says  he  decreased  em¬ 
ployees’  commute  times  by  65%  (for  those 


who  relocated),  and  for  all  the  30  sites  by 
17%  overall.  Since  then,  Mullins  has  done 
feasibility  studies  for  cities,  departments 
and  agencies  in  Washington  and  other 
states  that  have  uncovered  startling  results. 
For  instance,  in  one  West  Coast  city  only  4% 
of  firemen  work  at  the  firehouse  closest  to 
home;  only  1 1%  of  library  employees,  and 
just  27%  of  Starbucks’  employees  worked  at 
their  respective  jobs’  closest  location. 

Besides  saving  time  that  can  be  better 
spent  with  family,  the  program  also  puts 
money  in  the  pockets  of  employees.  At 
Key  Bank,  each  employee  saved  $2,600 
per  year,  300  gallons  of  gas,  6,000  pounds 
of  carbon  dioxide  (see  graphic,  right). 

Today,  Mullins  is  in  frequent  discussions 
with  the  Environmental  Protection  Agency 
and  the  Department  of  Energy,  which  is  int¬ 
erested  in  lessening  U.S.  dependence  on 
foreign  oil.  ProximateCommute  also  has 
potential  to  strengthen  national  security  — 
in  an  emergency,  people  could  get  home 
more  quickly  because  there  would  be 
fewer  cars  on  the  road. 

Driving  without  a  car 

One  of  the  benefits  of  living  and  working 
in  a  big  city  is  often  you  can  do  without  a 
car.  For  many, shedding  the  responsibility 
and  cost  of  maintenance,  upkeep,  insur- 


Takes 

■  NetGear  last  week  announced  wire¬ 
less  carrier T-Mobile  will  begin  bundling 
its  802.11b  wireless  PC  Cards  (MA401) 
as  part  of  T-Mobile's  HotSpotSM  ser¬ 
vice.  Customers  will  buy  the  NetGear 
cards  at  T-Mobile  retail  stores  ($80),  and 
upon  installation,  enter  T-Mobile  as  the 
network  name,  and  sign  on  to  activate 
service.  Pricing  plans  range  from  pay- 
as-you-go  and  prepaid  models  to  tradi¬ 
tional  monthly  subscriptions  costing 
$30  per  month  and  $50  per  month. 
www.netgear.com; www.tmobile.com 

■  Long  known  for  its  Macintosh  secu¬ 
rity  products.  Intego  recently  an¬ 
nounced  NetBarrier  2003,  consumer 
desktop  security  software  for  Windows 


PCs.  NetBarrier  includes  a  firewall;  anti¬ 
vandal  features  that  block  ping  attacks, 
port  scans  and  other  intrusion  attempts; 
data,  ad  banner  and  surf  filters  for  priv¬ 
acy  protection;  and  application  filters  for 
blocking  instant  messaging.  Other  fea¬ 
tures  include  detailed  logging  and  alerts, 
traffic  and  network  monitoring  and  auto¬ 
matic  online  updates.  NetBarrier  is  avail¬ 
able  via  download  or  in  retail  stores  for 
$50.  www.intego.com 

■  In  a  move  that's  expected  to  speed 
time  to  market  for  CableHome  1.0  resi¬ 
dential  gateways  and  broadband  routers, 
Jungo  Software  recently  announced 
OpenRG  2.1,  a  new  CableHome  1.0-com- 
pliant  version  of  its  software  platform. 
Hardware  vendors  will  build  Jungo's 
OpenRG  2.1  into  their  devices,  which  ser¬ 
vice  providers  will  offer  to  their  cus¬ 
tomers.  Once  in  place,  CableHome  1.0 


devices  will  let  providers  offer,  deliver  and 
manage  myriad  applications  over  cus¬ 
tomers'  broadband  connections. 

www.jungo.com 

■  In  the  emerging  connected  home,  wire¬ 
less  technologies  will  dominate,  and  Wi-Fi 
(802.11b)  will  lead  the  pack,  says  a  new 
report  from  In-stat-MDR.  “Wireless 
Cribs:  Living  Large  with  a  Wireless  Home 
Network"  predicts  worldwide  Wi-Fi  ship¬ 
ments  will  reach  33  million  by  2006,  up 
from  6  million  today.  But  Wi-Fi's  lack  of 
multimedia  support  (including  quality  of 
service)  gives  ultrawideband  technology 
an  opening,  as  well  as  new  technologies 
such  as  Zigbee,  designed  for  home 
automation  of  lighting  and  security,  and 
Spike,  a  technology  built  for  video  game 
controllers.  Mesh  peer-to-peer  technol¬ 
ogy  also  might  be  used  to  extend  the 
range  of  wireless  LANs. 


ance  and  parking  more  than  makes  up  for 
the  inconvenience  of  relying  on  mass  tran¬ 
sit,  cabs  or  walking.  Yet,  there  are  always 
times  when  you  need  or  want  a  car  — 
whether  to  visit  a  client,  friends  or  family 
just  beyond  mass  transit,  or  partake  in  the 
joys  of  megasupermarkets  and  home  im¬ 
provement  stores  on  the  outskirts. 

Zipcar  offers  a  solution.  Launched  in 
See  Balance,  page  32 

Trading  places 

Two  Seattle-area  bank  tellers 
saved  time,  money  and  gas  when 
they  traded  comparable  jobs  and 
work  sites  through  the  Proximate¬ 
Commute  program. 


Edmonds 
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Commuter  A 


18 
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Reduction 

70% 


Northgate  branch 
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Riverton  Heights 
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Reduction 

68% 


Commuter  B 


Distance  in  miles 

Commute  before  Proximate 
■  Commute  after  Proximate 


Combined  annual  savings  for 
both  commuters. 


Commute  miles  (round  trip) 

20,700 

Commute  expense  ($0.33/mi.) 

$6,800 

Gas  (gallons) 

860 

Auto  emissions  (pounds) 

1,140 

Carbon  dioxide  (pounds) 

16,400 

Commute  hours 

590 

SOURCE:  PROXIMATECOMMUTE 
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EasyVista  tailors  asset  mgmt.  app  to  teleworkers 


0  NetworkWorld  11/11/02 1 


When  it  comes  to  asset  manage¬ 
ment,  most  large  shops  either  rely 
on  existing  network  manage¬ 
ment  tools,  or  opt  for  products  from  Tally 
Systems,  Tangram  and  others.  The  trouble 
is, such  systems  rely  on  a  client  connection 
to  the  network  to  deliver  the  information 
collected  on  the  PCs. What  if  your  users  are 
remote?  Worse,  what  if  they  never  connect 
to  your  corporate  network? 

Technology  consulting  company  Experio 
faced  just  such  a  problem.  Of  its  1,000 
employees,  nearly  all  (save  for  office-based 
administration  and  IT)  are  mobile,  spend¬ 
ing  their  days  at  client  sites  or  on  sales 


calls.“We’re  only  making  money  when  peo¬ 
ple  are  out  in  the  field,”  says  Michael 
Shisko,  Experio’s  director  of  IT. 

Because  many  Experio  employees 
never  logged  on  to  the  corporate  network, 
Shisko  sought  an  asset  management  tool 
that  didn’t  rely  on  a  network  connection 
to  trigger  an  inventory.  That’s  where  Easy¬ 
Vista  came  in.  A  Web-based  service,  Easy¬ 
Vista  is  server-based, so  there’s  no  software 
to  install  on  the  client  systems.  A  small 
server  agent  (or  batch  file)  is  downloaded 
once, then  the  start  of  each  month  triggers 
an  inventory. The  agent  collects  all  system 
information,  including  hardware, peripher¬ 
als  and  software  applications.  Then  the 
next  time  the  user  boots  the  system,  the 
batch  file  looks  for  inventory  files,  and 
upon  finding  them,  brings  up  a  Web  page 
prompting  the  user  to  send  the  inventory 
file  to  EasyVista’s  network. 

On  the  administration  side,  the  network 
executive  logs  on  to  the  EasyVista  Web  site 


What  if  your  users  are 
remote?  Worse,  what  if 
they  never  connect  to 
your  corporate  network? 


to  view  the  inventory  information.There,he 
can  download  inventory  and  change  re¬ 
ports  as  PDF  files  and  Excel  spreadsheets. 
The  inventory  information  is  sent  as  an  en¬ 
crypted  file  from  the  user’s  PC  to  Easy¬ 
Vista’s  network.  No  data  is  sent  through  the 
firewall  in  real  time. 

“We  use  it  primarily  to  keep  track  of  hard¬ 
ware,”  Shisko  says.  Because  Experio  leases 
all  its  computers  from  Dell,  it  needed  an 
easy  way  to  match  users  with  serial  num¬ 
bers  and  cross-reference  them  with  lease 


expiration  dates. 

Another  good  use  of  the  service  is  to 
monitor  which  software  programs  are  in¬ 
stalled  on  remote  workers’  systems.The  ser¬ 
vice  recognizes  more  than  10,000  software 
titles,  and  the  company  adds  an  average  of 
10  to  12  new  titles  each  day  according  to 
Ray  Hoffer,  vice  president  of  sales. 

Geared  toward  smaller  companies  or 
those  with  a  dispersed  workforce, EasyVista 
is  very  low-priced. The  EasyVista  Premium 
version  costs  $6  per  year  per  PC. With  it, you 
can  download  as  many  as  16  inventory 
reports  via  PDFThe  new  version,  EasyVista 
Discovery,  uses  a  Web-based  interface  that 
lets  you  conduct  complex  searches,  view 
more  detailed  inventory  and  large  reports 
detailing  hundreds  of  PCs  without  the  has¬ 
sle  of  downloading  spreadsheets.  EasyVista 
Discovery  costs  $12  per  PC. 

Kistner  is  managing  editor  of  Net.  Worker. 
She  can  be  reached  at  tkistner@nww.com. 


Balance 

continued  from  page  31 

2000,  the  Cambridge,  Mass.,  start-up  pro¬ 
vides  self-service,  short-term  car  rentals  in 
Boston,  New  York,  and  Washington,  D.C. 
Zipcar  members  simply  log  on  to  the 
Zipcar  Web  site,  reserve  the  specific  car 
they  want,  where  and  when  they  want  it, 
then  head  to  the  parking  lot  where  the  car 
is.  (Zipcar  parks  cars  in  various  lots 
throughout  its  market  cities.)  The  user  ap¬ 
proaches  the  car,  presents  his  Zipcar  smart 
card  (or  Zipcard)  to  the  smart  card  reader 
mounted  inside  the  windshield,  and  upon 
verification,  the  Zipcard  opens  the  doors 
and  starts  the  car  (see  graphic,  right)  .When 
users  are  through,  they  simply  return  the 
car  to  the  lot  and  their  account  is  billed 
automatically 

“It’s  like  what  your  mother  said  you 
couldn’t  have  in  life:  Your  own  car  without 
all  the  responsibility”  says  Zipcar  CEO 
Robin  Chase.“It’s  like  your  dream  car” 

The  Zipcar  network  uses  Verizon’s  cellu¬ 
lar  digital  packet  data  (CDPD)  network  to 
communicate  between  the  company’s  res¬ 
ervation  server  and  the  cars.  In  addition  to 
the  smart  card  reader,  the  car  has  a  “prox¬ 
imity  reader”  that  includes  a  modem  and 
antenna  to  communicate  with  the  net¬ 
work.  Zipcar  plans  to  replace  its  CDPD 
component  with  a  newer  and  faster  gener¬ 
al  packet  radio  service  (GPRS)  network  in 
the  coming  year. 

Zipcar  has  4,500  members  and  a  fleet  of 
160  cars  parked  in  150  locations.  De¬ 
pending  on  the  city,  Zipcar  service  costs 
from  $5  to  $14  per  hour  and  40  cents  per 
mile. You  can  either  commit  to  driving  a 
minimum  of  $30  per  month  and  pay  no 
annual  member  fee,  or  pay  $75  per  year 
and  not  worry  about  minimum  usage. 

Ten  percent  of  Zipcar’s  members  are  self- 
employed,  one-third  work  in  the  profes¬ 
sional  services  industry, and  10%  work  in 
science  and  technology  While  city  dwellers 
use  it  to  avoid  owning  a  car,  many  subur¬ 


Wheels  when  you  want  them 

Zipcar  provides  members  with  self-service,  short-term  car  rental. 


The  Zipcar  user  logs  on  to  the  Web  site  and  reserves 
a  specific  car.  The  request  is  sent  to  Zipcar’s 
reservation  database,  which  returns  information 
about  available  cars  in  the  customer’s  desired  location. 


© 


When  the  user  selects  a  car,  the  Zipcar  server 
sends  the  reservation  information  (date  and 
time,  duration,  and  Zipcard  ID)  to  the  reserved 
car  via  Verizon’s  wireless  CDPD  network. 


Zipcar  Web 
server 


Reservation 

database 


When  finished 
driving,  the  user 
returns  the  car  and 
is  billed  automatic¬ 
ally  for  his  time  and 
miles  driven. 


The  user  approaches  the  car,  and  presents 
his  Zipcard  to  the  smart  card  reader  in 
the  car  (through  the  windshield).  The 
system  compares  the  user's  ID  with  the 
stored  reservation  and  upon  returning  a 
match,  the  doors  automatically  unlock. 


banites  use  it  to  avoid  driving  their  own  car 
into  the  city 

Members  are  using  the  service  in  creative 
ways.  For  instance,  teleworkers  who  spend 
one  day  in  the  office  use  the  Zipcar  service 
to  get  there.  One  member  runs  a  cafe  and 
bakery  and  uses  Zipcar  to  make  her  deliv¬ 
eries  and  to  transport  ingredients,  and  med¬ 
ical  students  use  it  to  shuttle  back  and  forth 
between  hospitals  and  labs. 

Chase  expects  Zipcar’s  membership  to  in¬ 
crease  to  6,000  members  next  year.  Al¬ 
though  the  company  has  no  plans  to  ex¬ 
pand  beyond  its  three-city  range,  the  mayor 
of  Hoboken,  N.J.,  approached  Zipcar  to 
help  him  deal  with  traffic  congestion,  and 
university  towns  such  as  Princeton,  N.J., are 
expressing  interest. 

Smarter  telework  centers 

Although  slow  to  catch  on,  the  idea  be 
hind  telework  centers  is  clever.  Rather  than 


suffering  a  long  commute  to  the  office, 
work  in  an  office  setting  closer  to  home, 
where  you  benefit  from  a  supported  net¬ 
work  infrastructure  and  share  the  society  of 
other  teleworkers. 

Matt  Cereno  took  the  idea  to  the  next 
level  by  bringing  home-based  sales  repre¬ 
sentatives  from  various  software  compa¬ 
nies  under  one  roof.  There,  they’re  man¬ 
aged  by  Cereno’s  company,  SOS  Network, 
enjoy  administrative  and  support  services, 
and  are  trained  to  sell  their  products,  col¬ 
laborate,  share  leads,  and  even  mine  leads 
for  each  other. 

Two  work  experiences  combined  guided 
Cereno  to  the  idea  of  SOS  Network.  For 
years,  he  worked  as  a  regional  sales  man¬ 
ager  for  Ingram  Micro,  where  he  managed 
20  software  vendors,  all  of  whom  worked 
independently.  Next,  Cereno  took  a  job  for 
a  U.K.companyand  became  the  firm’s  lone 
U.S.  sales  presence. 


“I  had  no  access  to  anything.  They  were 
in  the  U.K.  I  had  no  administrative  support, 
had  to  handle  all  the  marketing,  write  my 
own  proposals,  make  sales  calls,  travel  to 
meet  clients. Each  time  I  stepped  out  of  the 
office,  all  forward-moving  behavior 
stopped  right  there,”  Cereno  recalls. 

SOS  Network’s  first  client  was  a  com¬ 
pany  that  had  hired  several  dozen  sales 
representatives  to  work  alone  out 
of  their  home  offices;  the  idea 
being  that  each  home  office 
would  expand  the  company  into 
a  new  territory.  However,  the  sales 
folks  felt  isolated,  missed  the 
office  life,  and  failed  to  thrive.  And 
management  had  no  way  of 
knowing  what  the  sales  represen¬ 
tative  was  doing,  being  remote.  SOS  Net¬ 
work  came  in,  brought  everyone  together 
and  took  over  all  aspects  of  administra¬ 
tion  and  management. 

Today,  SOS  Network  focuses  on  enter¬ 
prise  software  vendors  only  SOS  can  take 
as  much  or  as  little  control  over  the 
employees  as  the  client  wants,  Cereno  says. 
The  Los  Angeles  company  plans  to  open 
eight  offices  across  the  country  in  the  com¬ 
ing  year. 

Each  office  will  house  sales  representa¬ 
tives  from  as  many  as  15  software  vendors. 
Some  of  SOS  Network’s  clients  are  large 
companies, such  as  Symantec,  which  use 
the  firm  to  train  salespeople  on  rolling  out 
a  new  product  line.  However,  the  company 
targets  small  companies  poised  to  expand 
their  territories. 

Cereno  has  a  soft  spot  for  start-ups,  typ¬ 
ically  run  by  engineers  who  have  no 
idea  how  to  sell  product. “That’s  what  we 
do.  We  re  here  to  sell,  to  make  moneyf 
Cereno  says.  ■ 
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To  meet  ever-increasing  demand  for  our  online 
products  and  services,  Toyota  turned  to  Akamai 
to  instantly  extend  the  scale,  performance  and 
reach  of  its  infrastructure  at  a  fraction  of 
the  cost  associated  with  traditional  build-out. " 

— Barbra  Cooper 
Group  Vice  President  and  CIO 
Toyota  Motor  Sales,  U.S.A.,  Inc. 


Toyota  is  drr 
the  cost  of  e 


Akamai  Gives  Toyota  Motor  Sales  the  Competitive  Edge. 

When  Toyota  launched  a  series  of  online  marketing  initiatives  to  promote  new  vehicles,  consumer 
traffic  to  its  sites  began  to  multiply.  To  meet  the  needs  of  its  growing  audiences  without  over-provisioning 
its  network,  Toyota  turned  to  Akamai.  Our  distributed  content  delivery  approach  helps  Toyota  maintain 
top  site  performance.  By  extending  its  infrastructure  to  the  edge — closer  to  customers — Toyota  gains 
efficient,  reliable  delivery  of  highly  interactive  information,  such  as  sales  and  marketing  campaigns, 
while  maintaining  control  and  significantly  reducing  infrastructure  costs. 


Learn  how  your  e-business  can  benefit  from  Akamai 
— get  our  Executive  Guide  to  E-Business  Infrastructure 


www.akamai.com/NWmag2  1-888-340-4252 
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©  2002  Akamai  Technologies,  Inc.  All  Rights  Reserved.  Akamai  and  the  Akamai  logo  are  registered  trademarks. 
All  other  trademarks  contained  herein  are  the  property  of  their  respective  owners. 


With  communications 


WHICH  PART  OF  YOUR  NETWORK  IS  LEAVING 
YOUR  BUSINESS  OPEN  TO  BREACHES  IN  SECURITY? 


Secure  your  entire  network. 

Today  complete  security  means  protecting  data  and 
voice,  along  with  everything  else  your  network 
currently  includes.  Having  the  right  firewall  or  even 
securing  your  wireless  LAN’s  and  VPN's  for  data  is 
just  a  starting  point.  With  the  possibility  of  threats 


like  accessing  stored  voicemails  or  intercepting 
IP  Telephony  traffic  looming  over  your  network,  you 
need  complete  multi-vendor,  multi-technology,  multi¬ 
applications  security  consultancy. 

Protect  all  your  points. 

Introducing  the  Avaya  Enterprise  Security  Practice.  Our 
Security  Consultants  offer  expertise  in  voice,  data,  and 
converged  networks,  with  both  technology  and  vertical 
certifications.  Avaya  helps  secure  internal  and  external 
points  of  access,  including  IP  Telephony,  Messaging 
and  CRM,  as  well  as  VPN's,  wireless  LAN’s  and  PBX’s. 


networks  now  made 


up  of  multiple  mter- 

connected  parts,  it's  no  longer  safe  to  just  protect 
individual  pieces  of  them.  That's  why  you  need  Avaya, 
the  company  that  can  assess,  develop  policy  and 
design  security  for  your  whole  network. 


Ensure  your  company’s  future. 

Don’t  leave  your  communications  network  unprotected. 
Prepare  for  today's  rapid  changes  in  network  security 
and  sign  up  for  our  Web  Event  at  avaya.com/secure 


AVAVA 


COMMUNICATION  WITHOUT  BOUNDARIES 


Patch  mgmL  packages  proliferat 

Takes 


Nokia,  Trend  Micro  team 
on  content  security 


■  IManage  has  unveiled  the  latest 
version  of  its  collaboration  and  con¬ 
tent  management  software.  The  new 
package  features  tight  integration 
with  Microsoft  Office,  and 
advanced  workflow  capabilities.  With 
Worksite  MP  3.0  users  can  create 
content  within  Microsoft  Office  pro¬ 
grams  such  as  Word,  Excel  and 
PowerPoint,  and  then  save  that  con¬ 
tent  directly  to  the  iManage  repository 
for  management  and  collaboration.  A 
key  feature  is  Worksite  MP  3.0’s  inte¬ 
gration  with  Outlook.  For  many  com¬ 
panies,  e-mail  is  the  preferred  method 
of  collaboration  and  iManage’s  new 
software  lets  users  save  e-mails  and 
attachments  in  iManage  repositories. 
Base  pricing  for  Worksite  MP  3.0, 
which  is  available  now,  starts  at 
$15,000  per  server,  www.imanage. 
com/products/worksite_mp.html 

■  Microsoft  has  released  new  tools 
for  its  SQL  Server  database  that 
should  make  it  easier  for  customers 
to  create  data  analysis  applications 
for  financial  services  and  manufactur¬ 
ing  industries.  Microsoft  last  week 
released  two  new  templates  for  its 
SOL  Server  Accelerator  for  Bl,  a 
rapid  application  development  tool 
that  automates  some  of  the  low-level 
programming  work  required  to  build 
analytical  applications,  often  referred 
to  as  business  intelligence  applica¬ 
tions.  The  templates  add  support  for 
financial  services  and  manufacturing 
companies,  and  follow  similar  tem¬ 
plates  released  in  May  for  retail  and 
sales  and  marketing.  The  idea  is  to 
help  customers  make  use  of  informa¬ 
tion  stored  in  their  enterprise  applica¬ 
tions  that  could  help  them  make  bet¬ 
ter  business  decisions.  The  templates 
make  it  faster  and  easier  to  build 
applications  that  analyze  such  infor¬ 
mation,  Microsoft  says.  The  templates 
can  be  downloaded  from  Microsoft's 
Web  site  at  www.micro soft.com/ 
solutions/bi/,  although  the  company 
suggests  that  customers  work  with 
one  of  its  partners  if  they  don’t  have 
experience  building  business  intelli¬ 
gence  applications. 


■  BY  PAUL  ROBERTS 

Nokia  and  software  maker  Trend  Micro 
announced  an  alliance  last  week  to  pro¬ 
duce  a  corporate  e-mail  security  appliance 
that  joins  Trend  Micros  antivirus  technol¬ 
ogy  to  Nokia’s  hardware  and  software. 

Called  Nokia  Message  Protector  SC6600, 
the  new  gateway  appliance  will  analyze  in¬ 
bound  and  outbound  e-mail  traffic,  accor¬ 
ding  to  Dan  MacDonald,  vice  president  of 
product  management  and  marketing  at 
Nokia  Internet  Communications,  a  division 
of  Nokia. 

“Eighty-seven  percent  of  all  exploits  enter 
a  network  through  e-mail,”  MacDonald 
says.“Companies  have  firewalls  in  place, 


but  there’s  a  river  running  under  that  fire¬ 
wall  called  e-mail,  and  it  has  a  lot  of  nasty 
things  in  it.” 

According  to  Nokia,  inbound  e-mail  and 
Simple  Mail  Transfer  Protocol  traffic  will  be 
directed  to  the  SC6600  from  a  corporate 
firewall.  For  each  e-mail  message  directed 
to  it,  the  SC6600  gateway  will  set  aside  a 
copy  and  break  that  message  into  its  con¬ 
stituent  elements.  The  SC6600  then  ana¬ 
lyzes  the  message,  any  attachments  to  the 
message,  and  elements  such  as  macros 
and  message  fonts. 

Each  component  of  an  e-mail  is  pro¬ 
cessed  by  Nokia’s  statistical  inspection 
engine  on  the  SC6600.  If  a  virus  or  exploit  is 

See  Nokia,  page  38 


patches  for  Microsoft  software,  and  adds  a 
number  of  reporting  controls  for  discover¬ 
ing  what  is  installed  on  network  clients  and 
servers,  including  those  running  Linux. 

ConfigureSoft  will  release  Security  Up¬ 
date  Manager  2.0,  which  includes  tools  for 
quickly  assessing  which  machines  need 
new  patches  and  administrative  tools  for 
controlling  who  can  install  them. The  soft¬ 
ware  runs  on  top  of  the  company’s 
Enterprise  Configuration  Manager  and 
relies  heavily  on  that  product’s  database 
of  information. 

“It  is  the  volume  [of  patches]  that  has 
become  unmanageable, ’’says  Jon  Speer,  IS 
director  for  TripWire,  which  develops  soft¬ 
ware  to  ensure  data  integrity.  He  says  the 
company  does  not  have  the  resources  to 
dedicate  to  patch  management. 

Microsoft  this  year  has  issued  64  patches, 
but  the  patches  are  coming  from  most  sup¬ 
pliers  of  network  equipment  and  enh 
prise-class  applications,  according  to 
vulnerability  lists  maintained  by  the 

See  Patch,  pagr. 


■  BY  JOHN  FONTANA 

Patch  management  remains  a  major 
headache  and  money  pit  for  network  exec¬ 
utives  and  can  no  longer  be  handled  by 


manual  processes,  according  to  experts. 

This  week,  BigFix  and  ConfigureSoft  will 
release  upgrades  to  their  patch  manage¬ 
ment  tools  for  Microsoft  software  aimed  at 
helping  network  executives  efficiently  run 


ConfigureSoft’s  Security  Update  Manager  2.0  lets  administrators  create 
templates  of  like  machines  to  speed  the  assessment  of  which  software 
needs  patching. 


A  single  button  lets  users  create  an  assessment  template 
made  up  of  a  selected  group  of  patches.  The  template  can 
then  be  run  only  against  the  group  of  potentially  affected 
software,  in  this  case  Internet  Information  Server  (IIS)  5.0, 
allowing  users  to  refine  their  patch  management  efforts. 
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Users  can  group  certain  types  of 
software,  such  as  versions  of  IIS, 
and  list  all  the  available  patches. 
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patch  management  over  distributed  net¬ 
works.  Vendors  such  as  Loudcloud,  St. 
Bernard  Software,  Shavlik  Technologies, 
Ecora,  Aelita,  PatchLink  and  Ponte  also 
offer  patch  management  tools. 

“Patch  management  is  extremely 
complex,”  says  Michael  Rasmussen, 
director  of  research  and  information 
security  for  Giga  Information  GroupTIt 
is  still  in  the  early  adopter  phase,  and 
many  people  are  still  trying  to  do  it 
through  a  manual  process.” 

But  with  the  proliferation  of 
vulnerabilities  on  the  Internet, 
that  is  no  longer  a  workable 
solution,  experts  say 
“Patch  management  is 
viewed  as  a  best  practice  to 
be  done  when  time  permits,”  says  Eric 
Hemmendinger,  an  analyst  with 
Aberdeen  Group.  “But  no  one  ever 
finds  the  time.  With  automated  tools, 
that  might  change.” 

That  change  could  go  a  long  way  to 
preventing  many  security  breaches. 
Gartner  reports  that  more  than  90%  of 
security  exploits  are  carried  out  through 
vulnerabilities  for  which  there  is  a 
known  patch. 

BigFix  will  unveil  its  Enterprise  Suite 
1.3,  which  includes  a  set  of  administra¬ 
tive  tools  to  ease  automated  deploy¬ 
ments  of  patches.  The  suite  also  incor¬ 
porates  support  for  distributing  updated 
virus  definition  lists  in  addition  to 
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Microsoft  shakes  up  SALT  offerings 


SALT  products  proliferate 

Speech  Application  Language  Tags  are  supposed  to  make  it  easier  for 
customers  to  voice-enable  Web  applications.  Here’s  a  look  at  some 
companies  offering  SALT  products: 


Company 

Product 

Description 

Hey  Anita 

FreeSpeech  SALT 

Platform,  Browser  and  pre¬ 
packaged  applications. 

Platform  supports  SALT,  VoiceXML  and 
Java.  Also  sells  general-purpose  apps 
including  voice  access  to  e-mail. 

Intervoic 

Omvia  Platform,  InVision 
Devm’t  Environment 

Both  products  use  Microsoft's  .Net  Speech 
SDK. 

Kirusa 

Multimodal  Platform 

Platform  for  wireless  service  providers  that 
supports  use  of  voice  and  visual  interfaces. 

Microsoft 

.Net  Speech  SDK  Beta  2.0 

Free,  downloadable  software  supports  W3C 
SALT  1.0  spec. 

Philips 

SALT  Browser 

Built-in  Java  2  and  ECMA  Script  platform 
independent. 

Vocalocity 

Voice  Gateway  2.0 

Interpreter  supports  SALT  and  VoiceXML. 

■  BY  CAROLYN  DUFFY  MARSAN 

An  emerging  standard  called  Speech 
Application  Language  Tags  received  a 
boost  last  month  when  Microsoft  an¬ 
nounced  several  efforts  to  beef  up  its 
support  for  a  specification  that  enables 
speech  interfaces  to  Web  information. 

An  extension  to  HTML,  Extensible  HTML 
and  XML,  SALT  is  designed  to  make  it  easi¬ 
er,  faster  and  less  expensive  for  developers 
to  support  spoken  interactions  with  Web 
pages.  A  company  could  use  SALT  to  create 
a  CRM  application  that  would  let  the  sales- 
force  access  or  update  customer  data  over 
cell  phones. 

Under  development  by  the  World  Wide 
Web  Consortium  (W3C),  SALT  supports 
so-called  multimodal  applications  that  let 
a  user  interact  with  a  Web  site  using  a  key¬ 
board,  mouse,  stylus  or  speech.  With  SALT, 
these  modes  can  be  used  independently 
or  concurrently 

The  creators  of  SALT  are  the  SALT 
Forum,  an  industry  group  led  by 
Microsoft,  Intel  and  Cisco  that  includes 
more  than  50  network  vendors.  Over  the 
summer,  the  W3C  agreed  to  develop  an 
open,  royalty-free  standard  for  SALT. 

Last  month  at  the  SpeechTEK  conference 
in  New  York,  Microsoft  released  a  new  beta- 
test  version  of  its  .Net  Speech  Software 
Development  Kit  (SDK)  that  supports  the 
version  of  the  SALT  specification  pending 


before  the  W3C  and  the  W3C  grammar  for¬ 
mats.  The  new  SDK  also  features  prebuilt 
controls  that  make  it  easier  for  developers 
that  don’t  have  experience  creating  speech 
applications. Microsoft  shipped  the  original 
.Net  Speech  SDK  beta  in  May 
“You  can  absolutely  create  a  deployable 
application  with  this  version  of  the  SDK,” 
says  James  Mastan,  director  of  marketing 


for  Microsoft’s  .Net  Speech  Technologies 
Group.  “You  could  create  telephony  appli¬ 
cations  or  multimodal  applications.” 

Microsoft  also  announced  a  technical 
preview  of  its  .Net  Speech  Platform,  which 
can  be  used  to  deploy  telephony  and  mul¬ 
timedia  applications  based  on  SALT.  The 
platform  includes  Microsoft’s  speech 
recognition  engine,  a  text-to-speech  engine 


from  Speech  Works,  Microsoft’s  SALT  inter¬ 
preter  and  telephony  integration  software. 

In  other  SALT-related  news.  Microsoft 
announced  a  joint  development  program 
for  its  .Net  Speech  partners  and  enterprise 
customers  to  foster  the  creation  of  SALT- 
based  applications. 

By  the  end  of  next  year,  Microsoft  plans  to 
announce  a  generally  available  release  of 
its  .Net  Speech  Platform  along  with  sup¬ 
porting  applications  in  such  vertical  areas 
as  unified  messaging,  travel  and  financial 
services,  Mastan  says. 

“The  belief  at  Microsoft  is  that  speech  is 
going  to  be  the  next  primary  user  para¬ 
digm,”  Mastan  says.“lf  you  think  of  it  in  that 
context,  it  cuts  across  all  applications.  But 
some  applications  seem  more  appropriate 
to  be  the  early  adopters  like  interactive 
voice  response,  call  centers  and  CRM.  As 
time  goes  on,  speech  will  become  more 
mainstream.” 

Meanwhile,  the  W3C  continues  to  make 
progress  on  the  SALT  specification.  The 
W3C’s  Multimodal  Interaction  Working 
Group  is  finishing  its  requirements  and 
then  will  discuss  SALT  in  terms  of  these 
requirements, says  Dave  Raggett,  a  W3C  fel¬ 
low  who  leads  the  working  group. 

“There  is  considerable  interest  in  multi¬ 
modal  interaction,”  Raggett  says.  “Many  of 
the  companies  in  the  SALT  Forum  [includ¬ 
ing  Microsoft]  are  also  involved  in  the  W3C 
multimodal  interaction  working  group.”  ■ 


Funk,  Interlink  improve  wireless  LAN  authentication 

Companies  look  to  simplify  wireless  administration  by  adding  TTLS  support. 


■  BY  ELLEN  MESSMER 

Funk  Software  and  Interlink 
Networks  have  each  added  sup¬ 
port  for  a  proposed  wireless  LAN 
authentication  standard  that 
promises  strong  mutual  authenti¬ 
cation  without  having  to  distrib¬ 
ute  and  manage  certificates  for 
all  end  users. 

Both  companies  added  support 
for  a  proposed  wireless  security 
protocol, developed  by  Funk  and 
Certicom,  called  Tunneled  Trans¬ 
port  Layer  Security  (TTLS)  to 
their  Remote  Authentication 
Dial-In  User  Service  (RADIUS) 
authentication  server  products. 
Funk  this  week  will  announce 
Steel-Belted  Radius/Server  Pro¬ 
vider  Edition  4.0  with  support  for 
TITS.  Interlink  says  it  shipped  its 
first  wireless  LAN  authentication 
server  called  Secure.XS  based  on 
TTLS  in  the  hope  that  if  you  build 
it,  the  wireless  users  will  come. 

Hanging  over  any  deployment 
of  TTLS  is  the  impending  arrival 


of  software  based  on  a  compet¬ 
ing  protocol,  the  Protected 
Extensible  Authentication 
Protocol  (PEAP), which  Microsoft 
and  Cisco  back.  PEAP  defines  a 
way  for  securely  transporting 
authentication  data,  including 
passwords,  over  802.11  wireless 
networks. 


TTLS  and  PEAP  work  within  the 
framework  of  the  broadbased 
IEEE  802.11  wireless  LAN  stan¬ 
dard  for  authentication  known  as 
802.  IX.  PEAP  and  TTLS  each  use 
Transport  Layer  Security  (TLS)  — 
which  is  often  described  as  a  bet¬ 
ter  Secure  Sockets  Layer  —  to  set 


up  an  end-to-end  tunnel  to  trans¬ 
fer  the  user’s  credentials, such  as  a 
password,  without  having  to  use  a 
certificate  on  the  client. 

“We’ll  try  TTLS  because  we  want 
to  deploy  [wireless]  LANs  secure¬ 
ly’ says  Jay  David,  manager  of  net¬ 
work  planning  and  services  at  the 
University  of  Rhode  Island  in 


Kingston, which  recently  installed 
about  20  Enterasys  Networks 
wireless  LAN  access  points  in 
campus  locations  for  use  by  stu¬ 
dents  and  staff.  But  David  ques¬ 
tions  whether  his  allegiance  to 
TTLS  will  be  long-term  when 
Microsoft  and  Cisco  back  PEAP 


in  their  products. 

Very  much  like  TTLS,  PEAP 
makes  use  of  the  IEEE’s  802.  IX 
framework  to  use  TLS  for  encryp¬ 
tion  of  authentication  data.  TTLS 
and  PEAP  are  practically  indistin¬ 
guishable,  but  Microsoft  and 
Cisco  are  pushing  their  favored 
protocol  at  the  IETF  in  competi¬ 
tion  with  Funk. 

“Unfortunately  Funk  is  fighting 
an  uphill  battle  with  TTLS  when 
you  have  Cisco  and  Microsoft 
backing  PEAP”  David  notes.  The 
University  of  Rhode  Island  has  to 
pay  to  license  TTLS  client  soft¬ 
ware  and  ensure  it’s  installed  on 
the  user’s  desktop  for  secure 
authentication.  But  Microsoft, 
which  last  month  made  PEAP 
available  as  an  add-on  for 
Windows  XP  has  said  it  intends  to 
ship  PEAP  as  part  of  the  operating 
system.  That  leaves  open  the  pos¬ 
sibility  that  the  PEAP  authentica¬ 
tion  software  might  become  as 
ubiquitous  on  the  desktop,  as 
Microsoft  holds  about  95%  of  the 


installed  base  today  That  would 
mean  the  university  wouldn’t 
have  to  pay  for  licensing  client 
software  down  the  road. 

Still, David  says  he’s  willing  to  try 
TTLS  because  it  seems  the  best 
approach  available  today  and  is 
much  easier  to  use  than  TLS, 
another  wireless  LAN  authentica¬ 
tion  option  supported  in  Funk 
and  Interlink  authentication  serv¬ 
er  products.  TLS  requires  digital 
certificates  be  used  on  the  wire¬ 
less  LAN  client. 

While  Funk  continues  to  push 
hard  for  TTLS,  it’s  also  facing  up  to 
the  inevitability  of  PEAP  “We’ll 
support  PEAP  within  six  months,” 
says  Funk  Vice  President  Joe 
Ryan. 

Interlink  also  will  add  PEAP  to 
Secure.XS  within  that  timeframe, 
according  to  Interlink  CEO  Mike 
Klein. 

Funk’s  Steel-Belted  Radius/SPE 
4.0  costs  $20,000.  Interlinks 
Secure.XS  starts  at  $2,500  for  250 
users.  ■ 


It  Unfortunately,  Funk  is  fighting  an  uphill 
battle  with  IT LS  when  you  have  Cisco  and 
Microsoft  backing  PEAP.  9 9 

Jay  David 

Network  planning  and  services  manager,  University  of  Rhode  Island 
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To  all  intents  and  purposes  it  looks 
like  we  have  seen  the  final  shoe  drop 
on  the  current  phase  of  the  Microsoft 
antitrust  case. 

The  result  might  not  be  exactly  what 
Microsoft  wanted  when  the  whole  process 
started  but  it  sure  is  not  what  many  others 
wanted.  U.S.  District  Court  Judge  Colleen 
Kollar-Kotelly  basically  endorsed  the  settle¬ 
ment  negotiated  between  the  U.S.  Depart¬ 
ment  of  Justice  and  Microsoft  earlier  this 
year.  The  judge  tweaked  a  few  things  but 
left  most  of  the  earlier  settlement  in  place, 
including  a  provision  that  should  speed 
the  adoption  of  Linux  in  many  parts  of  the 
world. 


Purina  paranoid 

For  the  paranoid,  one  provision  in  the 
300-page  decision  stands  out:“No  provision 
of  this  Final  Judgment  shall:  1.  Require 
Microsoft  to  document,  disclose  or  license 
to  third  parties:  (a)  portions  of  APIs  or  Doc¬ 
umentation  or  portions  or  layers  of  Com¬ 
munications  Protocols  the  disclosure  of 
which  would  compromise  the  security  of  a 
particular  installation  or  group  of  in¬ 
stallations  of  antipiracy  antivirus,  software 
licensing,  digital  rights  management,  en¬ 
cryption  or  authentication  systems,  includ¬ 
ing  without  limitation,  keys,  authorization 
tokens  or  enforcement  criteria;  or  (b)  any 
API,  interface  or  other  information  related 
to  any  Microsoft  product  if  lawfully  directed 
not  to  do  so  by  a  governmental  agency  of 
competent  jurisdiction.” 

The  (a)  section  seems  to  say  Microsoft 
can  withhold  information  about  their  APIs 
if  they  claim  that  releasing  the  information 
would  endanger  the  security  of  the  system. 
It  does  not  take  a  paranoid  to  expect 
Microsoft  to  do  this  because  it  already  has 


chow? 

when  talking  about  its  own  special  tweak 
on  the  IETFs  Kerberos  standard. 

The  (b)  section  is  pure  paranoid  fodder. 
This  provision  says  that  a  U.S.  government 
agency,  it  does  not  take  a  court,  can  tell 
Microsoft  to  not  release  the  API  specifica¬ 
tions.  Some  of  you  might  remember  the 
stories  circulating  early  in  1999  about  a 
“NSAkey”  discovered  in  all  recent  Micro¬ 
soft  operating  systems.  The  speculation 
was  that  the  U.S.  National  Security  Agency 
(NSA)  had  a  magic  key  that  would  let  it 
break  into  any  computer  running  Micro¬ 
soft  operating  systems  anytime  it  wanted 
to.  (Search  for“NSAkey”on  Google  to  see 
some  of  the  thousand  references  still 
around.) 

A  number  of  foreign  governments  be¬ 
came  absolutely  convinced  that  the  U.S. 
government  does  have  at  least  one  back 
door  into  Microsoft  operating  systems  and 
have  actively  pushed  alternatives  for  a 
while.  Now  along  comes  this  provision  in 
the  antitrust  settlement  to  help  reinforce 
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Computer  Emergency  Response  Team 
Coordination  Center  at  Carnegie  Mellon 
University  in  Pittsburgh. 

Speer  is  using  BigFix  to  tame  the 
problem. 

“BigFix  has  been  a  step  in  the  right  direc¬ 
tion.  We  are  not  completely  on  autopilot, 
but  we  go  through  the  new  patches  every 
few  days  and  push  them  out  to  our 
machines,”  he  says. 

With  Version  1.3,  BigFix  is  adding  the  abil¬ 
ity  for  multiple  Enterprise  Suite  servers  to 
communicate  with  the  BigFix  Fixlet  server. 
Fixlets  are  templates  that  define  a  security 
vulnerability  and  its  corresponding  patch. 
They  are  installed  on  servers  and  clients. 
That  lets  companies  install  Enterprise  Suite 
servers  at  multiple  locations  for  optimizing 
performance.  BigFix  also  has  added  a  peer 
element  that  lets  one  machine  at  a  remote 
site  download  new  Fixlets  from  the  Enter¬ 
prise  Suite  server  and  distribute  them  to 
the  rest  of  the  machines  in  its  domain. 

BigFix  also  has  enhanced  its  administra¬ 
tive  console  with  the  ability  to  create 
groups  of  like  machines  to  streamline  the 
distribution  of  patches.  And  it  has  en¬ 
hanced  its  reporting  engine  so  users  can 
create  customized  reports  or  integrate  with 
other  reporting  software  or  a  SQL-based 
database. 

Big  Fix  also  is  adding  support  for  virus 
software  from  McAfee  and  Symantec  to 
facilitate  the  automatic  distribution  of  new 


More  online! 

Read  our  tips  for  getting 
patch  management  under 
control. 
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virus  definition  lists. 


Worldwide,  corporations 
spend  in  excess  of 

$2  billion 

annually  to  investigate, 
prioritize  and  deploy 
software  patches  for 
security  vulnerabilities, 
according  to  a  recent  survey 
by  Aberdeen  Group. 


Enterprise  Suite  1.3  is  slated  to  ship  Nov. 
1 1  .The  software  costs  $25  per  seat  for  1 ,000 
seats.The  server  software  runs  on  Windows 
2000,  while  the  client  software  supports  all 
Microsoft  operating  systems  back  to 
Windows  95,  and  Red  Hat  Linux. 

Meanwhile,  ConfigureSoft  is  adding  a  trio 
of  new  capabilities  to  Security  Update 
Manager  2.0.  The  software  will  let  remote 
machines  download  patches  from  a  local 
distribution  point, which  will  allow  users  to 
reduce  the  amount  of  traffic  over  a  WAN.  It 
also  includes  a  logging  feature  to  ensure 
the  patch  was  correctly  installed.  Con¬ 
figureSoft  also  is  adding  a  template  feature 
that  will  let  users  test  a  group  of  like  ma¬ 
chines,  such  as  all  those  running  Microsoft 
SQL  Server,  against  a  newly  issued  patch. 

“Our  focus  now  is  on  patch  management 
issues  for  large  enterprises,”  says  Alex 
Goldstein,  CEO  of  ConfigureSoft. “We  do 
things  faster  and  on  a  greater  scale.” 

ConfigureSoft  also  has  added  an  admin¬ 
istrative  capability  for  customizing  admin¬ 
istrative  roles  that  control  who  has  access 
to  what  machines  and  who  can  deploy 
patches. 

Security  Update  Manager  2.0  is  expected 
to  ship  this  week  and  costs  $25  per  server 
and  $5  per  workstation.  ■ 


Nokia 
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detected,  the  entire  message  is  quaran¬ 
tined  and  a  report  is  sent  back  to  the  mes¬ 
sage’s  sender  and  to  its  recipients,  accord¬ 
ing  to  MacDonald. 

Trend  Micro  is  providing  antivirus  tech¬ 
nology  that  will  be  used  in  the  Nokia  mes¬ 
sage  protector  component  of  the  SC6600. 
Nokia  provides  other  components  that 
perform  content  filtering,  URL  filtering, 
spam  rejection  and  exploit  rejection. 

Trend  Micro  manages  virus  signature  up¬ 
dates  and  alerts  and  reports  to  a  back-end 
server  operated  by  Nokia.  Those  updates 
will  be  verified  and  run  through  quality 
control  checks  by  Nokia,  signed  and  then 
pushed  out  to  SC6600s  at  customer  sites 
using  an  automated  update  feature,  ac¬ 
cording  to  MacDonald  and  Kevin  Murray 
senior  product  manager  at  Trend  Micro  in 
Tokyo. 

The  automatic  update  feature  is  a  man¬ 
datory  component  of  the  SC6600,  al¬ 
though  customers  can  determine  how  fre¬ 
quently  they  want  their  appliances  to 
check  for  updates,  MacDonald  says. 
Manual  virus  signature  updates  are  not 
possible,  he  says. 

Outbound  e-mail  also  will  be  analyzed 
by  the  SC6600.  Customers  can  block  spe¬ 
cific  file  attachments  and  text  strings  such 
as  domain  names  from  being  sent  out  by 
employees  using  e-mail,  MacDonald  says. 

Administrators  will  use  a  Web-based 
management  interface  to  indicate  what  in¬ 
formation  or  types  of  information  should 
be  blocked,  he  says. 

The  SC6600  will  be  a  one-rack,  dual¬ 
processor  appliance.  It  will  use  Nokia’s 
IPSO  operating  system  and  will  be  opti¬ 
mized  for  e-mail  message  protection, 
capable  of  processing  15K-byte  e-mail 
messages  at  a  rate  of  120,000  per  hour, 
MacDonald  says. 

The  device  is  being  targeted  at  midsize 
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their  suspicions. 

One  puzzling  thing  about  this  whole 
episode  is  that  clause  (b)  probably  did  not 
need  to  be  written  to  make  it  so.  As  pointed 
out  in  comments  sent  to  the  Justice  Depart¬ 
ment  after  the  proposed  settlement  was 
first  posted,  the  clause  “is  a  tautology  and  is 
thus  superfluous  to  this  proposed  Final 
Judgment. . . .  [the  clause]  simply  restates 
the  law” 

Maybe  the  judge  is  a  secret  supporter  of 
open  software  and  wanted  to  prod  people, 
like  the  Chinese  government,  to  be  distrust¬ 
ful  of  Microsoft  operating  systems  so  they 
would  switch  to  Linux  where  you  can  see 
what  is  going  on. 

Disclaimer:  I  do  not  know  if  the  Chinese 
government  is  distrustful  of  Harvard,  nor¬ 
mally  the  further  away,  the  better  Harvard 
looks,  but  the  above  is  my  own  paranoia. 

Bradner  is  a  consultant  with  Harvard 
University’s  University  Information  Systems. 
He  can  be  reached  at  sob@sobco.com. 


to  large  companies  of  1,000  employees  or 
more.  It  will  sell  for  about  $16,000,  not  in¬ 
cluding  Trend  Micro’s  per-user  license  of 
about  $22,  MacDonald  and  Murray  say. 

Nokia  is  competing  with  companies 
such  as  NetScreen  Technologies  and 
Symantec  in  the  growing  market  for  net¬ 
work  security  appliances  that  halt  viruses 
and  thwart  attacks  at  the  network  edge  be¬ 
fore  they  reach  critical  systems. 

The  decision  to  collaborate  with  Trend 
Micro  is  consistent  with  Nokia’s  strategy  of 
partnering  with  leading  security  software 
vendors  to  deploy  their  technology  on 
Nokia’s  hardware  platform. 

fcfc  Companies  have 
firewalls  in  place,  but 
there's  a  river  running 
under  that  firewall 
called  e-mail,  and  it 
has  a  lot  of  nasty  things 
in  it  99 

Dan  MacDonald 

Vice  president,  product  management, 
Nokia 

The  company  has  long  partnered  with 
software  maker  Check  Pbint  Software  to 
produce  dedicated  security  appliances 
such  as  firewalls. 

Nokia’s  announcement  of  the  SC6600 
coincides  with  the  company’s  Mobile  In¬ 
ternet  Conference  in  Munich  this  week. 
The  company  has  announced  a  variety  of 
new  end-to-end  security  appliances  that 
are  to  be  released  in  the  first  quarter  of 
next  year. 

Roberts  is  a  correspondent  with  the  IDG 
News  Service’s  Boston  bureau. 
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One  company  enables  you  to  add  printers  and  MFP  devices 
to  your  network  without  using  cables.  Only  Kyocera  Mita 
offers  an  embedded  wireless  LAN  solution,  which  delivers 
superior  performance  as  if  it  were  wired.  Now  you  can  add 
MFPs  in  places  that  were  virtually  inaccessible,  or  move 
printers  from  office  to  office  as  workload  demands. 

Flexible  document  solutions  to  meet  today’s  needs  and 
tomorrow’s  challenges.  In  an  increasingly  wireless  world, 
one  company  is  leading  the  way.  Kyocera  Mita. 

To  learn  more  about  our  complete  end-to-end 
wireless  solution,  visit  www.kyoceramita.com 
or  call  1-800-222-6482. 
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■  WIRELESS  ■  REGULATORY  AFFAIRS 


Verizon  to  enter  business  longdistance 

Northeast  service  expected  to  launch  early  next  year  and  reach  56  markets. 


■  BY  MICHAEL  MARTIN 

Verizon’s  impending  entry  into  the  busi¬ 
ness  long-distance  market  might  not 
accelerate  the  decline  in  the  cost  of  tele¬ 
com  services,  but  it  will  give  customers 
another  financially  stable  provider  to 
which  they  can  turn,  experts  say. 

“We  will  compete  on  price  where  we 
have  to,  but  for  the  most  part  we  will  com¬ 
pete  on  product  and  value,”  said  Ivan 
Seidenberg,  Verizon’s  president  and  CEO, 
announcing  the  move  last  week. 

The  incumbent  local  service  provider 


■  Responding  to  the  uncertainty  sur¬ 
rounding  service  providers  in  the 
tough  economy,  managed  hosting 
company  Digex  is  offering  a  12-month 
contract  term  that  allows  early  termi¬ 
nation  with  no  penalty.  The  Digex  (a) 
No  Risk  promotion  is  available 
through  Dec.  31.  Customers  who  ter¬ 
minate  the  contract  within  the  first  six 
months  will  not  be  penalized  and  will 
have  install  fees  refunded,  a  Digex 
spokeswoman  says.  If  the  customer 
completes  the  yearlong  contract,  the 
first  month  of  the  new  contract  will 
be  free.  Digex  @  No  Risk  is  available 
to  new  customers  and  in  new  configu¬ 
rations  for  existing  customers.  It 
applies  to  all  standard  services. 


■  Interliant  announced  last  week 
that  it  has  sold  “noncore"  shared 
Web  hosting  assets  to  Sprint  for  $5 
million.  Sprint  bought  servers,  stor¬ 
age  and  networking  gear  that  Inter¬ 
liant  used  to  support  some  of  Sprint’s 
“private  label”  customers,  which  it 
acquired  from  DellHost  last  year. 
Sprint  is  bringing  the  gear  and  cus¬ 
tomer  support  in-house,  which  is  ex¬ 
pected  to  result  in  operational  sav¬ 
ings  for  Sprint,  according  to  the  car¬ 
rier.  Managed  Web  hosting  service 
provider  Interliant  has  been  selling 
various  assets  since  filing  for  Chap¬ 
ter  11  in  August. 


fcfcWe  can  build  a  network  better  and  faster 
than  we  can  move  by  picking  up  someone’s 
legacy  network.  9  9 


Ivan  Seidenberg 

President  and  CEO,  Verizon 


in  the  Northeast,  Verizon  is  taking  aim  at 
business  telecom  leaders  AT&T,  World¬ 
Com  and  Sprint  with  its  plans  to  enter 
into  the  business  voice  and  data  long-dis¬ 
tance  market.  Verizon  will  launch  ser¬ 
vices  to  customers  in  the  Northeast  in 
the  first  quarter  of  next  year  and  roll  out 
nationally  to  56  markets  during  the  next 
two  years. 

Verizon  has  a  significant  presence  in  a 
number  of  metropolitan  areas  outside  its 
local  service  territory  that  the  former  GTE 
served.Verizon  was  formed  in  2000  by  the 
merger  of  Bell  Atlantic  and  GTE. 

Verizon’s  Business  Solutions  group  will 
spearhead  its  business  initiative.  Business 
Solutions,  which  sells  integration  and  net¬ 
work  services  to  large  businesses,  employs 
about  14,000  people  and  has  annual  sales 
of  $7  billion.The  enterprise  services,  which 
will  be  marketed  under  the  name 
Enterprise  Advance,  will  include  network 
management,  data  storage,  business  recov¬ 
ery  and  security  in  addition  to  basic  voice 
and  data  services. 

Under  the  Telecommunications  Act  of 
1996,  Verizon  and  the  other  regional  Bell 


operating  companies  —  BellSouth,  SBC 
Communications  and  Qwest  —  were  pre¬ 
vented  from  offering  long-distance  ser¬ 
vices  in  their  local  service  territories  until 
they  had  proven  that  they  opened  their 
telecom  networks  to  competitors. 

Verizon  has  won  approval  to  offer  long¬ 
distance  services  in  all  of  its  15  local  ser¬ 
vice  areas  except  three  —  Maryland,  West 
Virginia  and  the  District  of  Columbia. 
Verizon  officials  say  the  company  will 
wrap  up  approvals  for  those  areas  during 
the  next  several  months. 

The  company  has  offered  long-distance 


services  in  many  of  its  local  states  for 
more  than  a  year.  But  until  now,  it  has  con¬ 
centrated  on  the  consumer  and  small- 
business  markets.  In  some  states,  Verizon 
has  managed  to  snap  up  as  much  as  30% 
of  the  consumer  long-distance  market. 

Verizon  shouldn’t  have  much  trouble 
drumming  up  long-distance  customers  in 
the  large-business  market,  says  Thomas 
Nolle,  president  of  consulting  firm  CIMI 
and  a  Network  World  columnist. 

“We’ve  done  surveys  that  show  that  in 
the  enterprise  market  the  RBOCs  have  as 
See  Verizon,  page  42 


Cybera  looks  to  undercut  frame  relay 


■  BY  TIM  GREENE 

NASHVILLE  —  Cybera, a  regional  carrier 
with  national  aspirations,  is  rolling  out  net¬ 
work-  and  customer-site  VPN  services  at 
what  it  says  are  half  the  price  of  frame 
relay  connections. 

The  provider  has  four  services  under 
the  name  Smart  Network  that  rely  on  vir¬ 
tual  router  gear  in  its  network  to  create 
fully  meshed  connections  among  corpo¬ 
rate  sites.  Called  SmartOffice,  Smart- 
Remote,  SmartDial  and  SmartVPN,the  ser¬ 
vices  are  designed  to  offer  an  array  of 
network  connections  for  varying  business 
circumstances. 

SmartOffice  is  billed  as  a  frame  relay  re¬ 
placement  in  which  customer  sites  are  con¬ 
nected  to  Cybera’s  network  via  any  trans¬ 
port  link  —  DSL,  frame  relay  private  line, 
metropolitan  Ethernet  —  and  the  traffic  is 
routed  across  Cybera’s  backbone  via 
Cosine’s  IPSX  3500  IP  services  switch.  The 
switch’s  virtual  router  technology  makes  it 
seem  as  if  each  customer  has  its  own  router 


Cybera  WAN  services 

Service  provider  Cybera  offers  four 
options  for  linking  business  sites. 


Service 

Price/site/month 

SmartRemote 

$100 

SmartOffice 

$120  to  $400* 

SmartDial 

$25(per  user) 

SmartVPN 

$50  plus  hardware 

’Depends  on  number  of  sites,  size  of  connection. 


within  Cybera’s  network  to  direct  traffic. 

SmartOffice  costs  $120  to  $400  per 
month,  per  site,  depending  on  how  many 
sites  are  connected  and  what  size  access 
link  is  used.  A  190K  bit/sec  SDSL  connec¬ 
tion  to  the  service  costs  $150  per  month.  By 
comparison,  a  56K  bit/sec  frame  relay  con¬ 
nection  can  cost  $200  to  $300  per  month, 
per  site,  plus  a  per-virtual-circuit  fee.  The 
SmartOffice  service  is  fully  meshed  with¬ 


out  virtual  circuit  fees.  Some  providers  are 
slashing  frame  prices  in  response  to  com¬ 
peting  IP  services. 

SmartRemote  is  the  same  service  based 
on  asymmetric  DSL  links.  SmartDial  is  for 
users  who  attach  to  the  network  via  dial¬ 
up  Internet  connections  and  whose  ses¬ 
sions  are  protected  by  IP  Security  (IPSec) 
VPN  software  running  on  the  PC.  Smart- 
VPN  is  for  users  who  want  to  use  the 
Internet  as  the  link  between  sites.  Cybera 
protects  these  connections  with  managed 
IPSec  VPN  appliances  from  NetScreen 
Technologies. 

Cybera  says  it  wants  to  enhance  the  ser¬ 
vice  by  adding  more  access  options,  in¬ 
cluding  wireless.  It  also  plans  to  open 
sales  offices  outside  the  Southeast.  It  can 
connect  to  sites  anywhere  in  the  U.S. 

Executives  from  former  DSL  service  pro 
vider  BlueStar  Communications  formed 
the  company  in  February  2001.  DSL  pro¬ 
vider  Covad  Communications  boe  • 
BlueStar  and  ultimately  shut  it  down 
escape  bankruptcy  ■ 
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EYE  ON  THE 
CARRIERS 

Johna  Till 
Johnson 


Many  telecom  departments  and  IT 
groups  are  focusing  on  what  1  call 
“operational  excellence.”  In  a  nut¬ 
shell,  that  means  providing  top-quality  ser¬ 
vices  to  internal  customers:  the  lines  of 
business  and  end  users  within  their  orga¬ 
nizations.  Operational  excellence  requires 
vision,  customer  intimacy  and  the  ability 
to  execute  flawlessly. 

If  that  doesn’t  describe  your  IT  group 
yet,  where  should  you  start?  You  might 
think  it’s  with  the  service-level  agreement 
(SLA).  Well,  yes  and  no.  SLAs  are  impor¬ 
tant,  but  many  organizations  implement 
them  too  early  in  the  process,  without 


How  to  make  ‘operational  excellence'  a  reality 


knowing  what  their  customers  actually 
require,  or  why  they’re  not  delivering. 
Frustration  and  failure  result. 

Instead,  start  by  benchmarking  your 
existing  internal  service  delivery.  Find  out 
how  you’re  doing  —  from  the  customer’s 
perspective.That  means  gathering  qualita¬ 
tive  and  quantitative  data.  Yes,  network 
engineers  need  to  measure  downtime, 
availability  and  performance,  and  the 
help  desk  needs  to  know  mean  time  to 
respond  and  mean  time  to  repair.  But 
that’s  not  all. 

Take  the  time  and  energy  to  find  out 
your  users’  main  concerns.  You’ll  proba¬ 
bly  uncover  surprises.  Users  often  blame 
the  network  for  application  difficulties. 
Or  they  complain  that  a  service  is  diffi¬ 
cult  to  configure  and  use,  rather  than 
unreliable  or  unavailable.  One  client 
found  that  his  internal  users  perceived 
videoconferencing  services  to  be  at  fault 
because  users  couldn’t  figure  out  how  to 


set  up  calls.You  might  even  discover  that 
an  area  in  which  you’ve  been  investing 
considerable  resources  —  obtaining  that 
fourth  or  fifth  availability  “nine”  —  isn’t 
even  an  issue. 

Once  you’ve  compiled  this  information, 
review  it  internally  Where  does  it  seem  your 
organization  could  use  the  most  improve¬ 
ment?  Dispatch  a  “tiger  team”  to  understand 
why  you’re  below  par  and  propose  solu¬ 
tions.  If  you’re  severely  understaffed,  that 
tiger  team  might  be  you. Trust  me,  it’s  worth 
the  late  nights  and  weekend  work. 

Now  that  you  have  a  baseline  under¬ 
standing,  you’re  ready  to  talk  about  your 
efforts  publicly.  Prepare  a  set  of  reports  tai¬ 
lored  to  your  disparate  audiences:  senior 
executives,  network  engineers  and  help 
desk  personnel.  And  don’t  just  e-mail  this 
information:  Make  sure  to  review  the  data 
with  your  customers,  preferably  in  person. 
This  lets  you  defuse  potential  issues  early 
And  finally,  commit  to  providing  this  infor¬ 


mation  regularly,  along  with  an  update  on 
the  progress  of  the  tiger  team. 

Only  once  you  know  how  you’re  doing 
and  why  you’re  falling  short  are  you  finally 
ready  to  craft  SLAs. 

Do  this  collaboratively.  Before  setting 
SLAs  in  stone,  get  another  round  of  user 
feedback  to  make  sure  you’re  focusing 
on  what  your  customers  think  is  impor¬ 
tant.  This  also  lets  you  apprise  folks  of 
any  necessary  trade-offs.  Let’s  say  you 
can  deliver  either  5-minute  response 
time  or  5-hour  resolution  time,  but  not 
both:  Have  your  customers  tell  you  which 
matters  more. 

Remember  that  the  best  route  to  cus¬ 
tomer  ecstasy  is  delivering  110%  of  what 
your  customers  have  told  you  they  need. 

Johnson  is  president  and  chief  research 
officer  at  Nemertes  Research,  a  technology 
research  firm.  She  can  be  reached  at 
johna@nemertes.  com. 


Speedera  service  generates 
dynamic  images  on  the  fly 


■  BY  JENNIFER  MEARS 

SANTA  CLARA  —  Content 
delivery  specialist  Speedera 
Networks  says  it  has  the  answer 
for  companies  tired  of  the  time- 
consuming  task  of  manipulating 
and  storing  static  images  on 
graphics-heavy  Web  sites. 

Speedera  is  partnering  with  im¬ 
aging  software  maker  TrueSpectra 
to  provide  a  fully  hosted  service 
that  lets  customers  make  changes 
to  Web  site  images  on  the  fly  The 
Speedera  Dynamic  Imaging  Ser¬ 
vice,  being  introduced  this  week, 
integrates  TrueSpectra’s  Image 
Servers  into  Speedera’s  content 
delivery  network. 

Typically,  Web  sites  start  with  a 
high-quality  graphic  and  then 
make  derivatives  of  that  graphic 
for  various  uses,  such  as  a  zoom 
view  or  an  image  with  a  text 
overlay.  Each  modified  image  is 
then  stored  as  a  static  file. 
TrueSpectra  eliminates  the  need 
to  create  and  store  static  images 
by  letting  Web  sites  generate 
dynamic  images  on  the  fly. 

The  technology  uses  a  URL 
query  string  based  on  HTTP  or 
XML  to  tell  the  application  server 
how  to  modify  an  existing  image. 
For  Speedera  customers,  images 
are  uploaded  to  the  Speedera 
network  and  changes  can  be 
made  via  SpeedEye,  Speedera’s 
monitoring  and  management 
user  interface. 

“Our  technology  allows  you  to 


Easier  images 

Speedera  is  hosting  True¬ 
Spectra’s  Image  Servers 
within  its  content  delivery 
network  to  offer  a  dynamic 
imaging  service.  Key  features: 

•  Eliminates  need  to  manually 
manipulate  and  store  static 
images. 

•  Images  can  be  manipulated  on 
the  fly  to  create  zoom  views, 
for  example. 

•  Fully  outsourced  and  integrated 
with  Speedera's  CDN. 

•  XML-compliant. 

work  from  original  high-quality 
source  images,  but  instead  of 
manipulating  them  on  a  software 
package,  you  use  a  URL  string 
and  tell  the  server  what  to  do 
with  it.  Then  the  server  goes  and 
does  it  for  you,”  says  David 
Watkins,  CEO  of  TrueSpectra.  “It 
eliminates  most  of  the  repetitive 
tasks  and  provides  a  lot  more 
flexibility  because  if  you  decide 
you  want  your  thumbnails  to  be  a 
little  bit  bigger,  you  just  basically 
change  a  parameter  on  your 
application  server  and  now  your 
images  are  just  a  little  bit  bigger? 

The  technology  also  enables 
zoom  capabilities,  a  real  plus  for 
retail  sites  that  want  to  give  cus¬ 
tomers  a  closer  look  at  merchan¬ 
dise,  Watkins  says. 

Jill  Aldort,  a  research  analyst  at 


InfoTrends  Research  Group,  says 
TrueSpectra  competes  with  firms 
such  as  Equilibrium,  PicturelQ 
and  iPIX.  By  partnering  with 
Speedera, TrueSpectra  is  offering 
a  unique  service,  she  adds. 

“This  enables  them  to  offer 
their  service  at  a  much  lower 
price  point,”  Aldort  says.  “For  a 
couple  thousand  dollars  a 
month  customers  get  this  ser¬ 
vice,  and  they  don’t  have  to 
invest  thousands  and  thousands 
of  dollars  for  start-up  costs. 
Rather,  it’s  just  something  that’s 
added  to  an  existing  service.” 

By  integrating  the  service  with 
a  CDN,  customers  get  the  added 
benefit  of  quick  downloads  and 
Speedera  gets  an  edge  by  pro¬ 
viding  a  unique  service  that 
might  not  be  available  from  its 
CDN  competitors,  Aldort  says. 

“It’s  a  natural  area  [for  Speed- 
era]  to  get  into,”  she  says.  “It  goes 
hand  in  hand  to  have  the  content 
delivery  network  coupled  with  a 
capability  that  allows  graphic¬ 
intensive  Web  sites  to  more  effi¬ 
ciently  deliver  those  images  and 
deliver  rendered  versions  of  those 
images. ...  It  gives  Speedera  a  leg 
up  on  their  competition.”  ■ 


Web 

Applications 


Subscribe  to  our  free  newsletter. 
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Verizon 

continued  from  page  41 

good  a  perception  [among  cus¬ 
tomers]  as  the  interexchange 
carriers,”  he  says. 

Large  businesses  are  espec¬ 
ially  concerned  about  turning 
to  interexchange  carriers  now. 
Nolle  says,  given  the  poor  finan¬ 
cial  health  of  companies  such 
as  WorldCom.  By  comparison, 
Verizon  looks  like  a  safe  haven, 
he  says. 

One  area  where  Verizon  will 
face  a  challenge  is  in  deciding 
what  kind  of  core  network 
to  build. 

“If  they’re  too  conservative 
there’s  a  risk  of  not  building  a 
network  that  can  take  full 
advantage  of  new  IP  services,” 
Nolle  says.“And  if  they’re  too  rev¬ 
olutionary,  they  could  have  trou¬ 
ble  supporting  legacy  services 
like  frame  and  ATM.” 

Details  sketchy 

Verizon  officials  didn’t  reveal 
many  details  of  how  they  plan 
to  build  out  a  long-haul  net¬ 
work.  The  backbone  will  be 
optical,  and  it  will  be  leased 
from  other  bandwidth  pro¬ 
viders  rather  than  purchased. 
Leasing  lets  Verizon  take  advan¬ 
tage  of  the  low  cost  of  long-haul 
bandwidth. 

The  company  has  no  plans  to 
purchase  a  long-haul  provider 
such  as  WorldCom. 

“We  can  build  a  network  bet¬ 
ter  and  faster  than  we  can  move 
by  picking  up  someone’s  legacy 
network,” Seidenberg  said. 

AT&T,  the  leader  in  the  enter¬ 
prise  long-distance  market, 
doesn’t  see  Verizon  as  a  signifi¬ 


cant  threat,  says  Mike  Jenner, 
vice  president  of  global  IP  net¬ 
work  services  for  AT&T 
Business. 

Verizon  is  a  newcomer  to  busi¬ 
ness  long-distance,  and  it  will 
take  some  time  for  the  company 
to  learn  the  market,  Jenner  says. 
He  also  says  Verizon  won’t  have 
the  global  reach  AT&T  has, 
despite  the  fact  that  Verizon  has 
some  international  network 
assets. 

Nolle  says  SBC  and  BellSouth 
won’t  be  far  behind  Verizon  in 
launching  business  long-dis¬ 
tance  offerings.  SBC  likely  will 
enter  the  market  later  this  year, 
he  says.  BellSouth  will  likely  not 
concentrate  on  the  large  busi¬ 
ness  market  as  heavily  as 
Verizon  and  SBC,  because  only 
about  11%  of  large  corporate 
headquarters  are  based  in  Bell- 
South’s  local  service  area, 
Nolle  says. 

Qwest  already  offers  long-dis¬ 
tance  services  outside  its  local 
service  area.  But  it  will  likely  be 
the  last  of  the  RBOCs  to  gain 
long-distance  approval  in  all  of 
its  local  states,  because  it  is  the 
furthest  behind  in  the  process, 
Nolle  says.B 


More  online! 

See  how  SBC  and  BellSouth  are  fanng  in 
their  long-distance  bids. 
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c  2002  Quantum  is  a  trademark  of  Quantum  in  the  United  States  and  other  countries  All  other  trademarks 
are  the  property  of  their  respective  companies  Specifications  are  subject  to  change  without  notice. 


Quantum 

DX30 


The  leader  in  data  protection  introduces  the  new  "best  practice"  for  backup.  With  backup  windows  shrinking 
and  data  restore  time  more  critical  than  ever,  the  Quantum  DX30  is  the  logical  next  step  in  data  protection.  With 
the  Quantum  DX30,  you  can  now  take  advantage  of  the  speed  of  disk-based  storage  to  backup  and  archive  in  less 

time,  with  greater  confidence,  and  zero  changes  in  your  existing  hardware,  software 
and  operational  procedures. 

Buckle  up  for  backup  speeds  that  exceed  288  GB/hour!  The  Quantum  DX30  enhances 
existing  tape  libraries  by  separating  the  backup  target  from  the  backup  archive.  And 
because  the  Quantum  DX30  provides  data  transfer  rates  that  surpass  288  GB/hour,  both  the  backup  and  restore 
windows  are  minimized.  At  the  same  time,  the  Quantum  DX30  utilizes  RAID-protected 
disks  to  boost  confidence  in  backup  completion  beyond  99%! 

Only  Quantum  could  rewrite  the  book  on  backup.  Leveraging  over  a  decade  of 
experience  in  data  protection,  Quantum  developed  the  most  cost-effective  way  to  bridge 
the  gap  between  traditional  backup  systems  and  the  complex  and  costly  practice 
of  mirroring  and  replication  hardware  and  software.  The  result  is  the  Quantum  DX30. 


Quantum 
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Get  up  to  speed  and  receive  a  chance  to  win  a  Cannondale  bicycle  worth  over  $2,500.  Call  1-866-827-1500 

or  visit  us  on  the  Web  at  www.quantum.com/DX30  to  get  a  free  copy  of  "Disk-Based  Backup  —  The  Next 
Generation  of  Enhanced  Backup  Solutions"  and  register  to  win. 


Speed.  Intelligence.  Confidence.  From  the  world's  leader  in  data  protection. 
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Ending  a  next  generation  phone  system 

that  works  for  you 

....doesn’t  have  to  be  a  daunting  task. 


For  many  people,  finding  the  right  phone  system  that  meets  the  needs  of  their 
small  to  mid-sized  business  feels  like  an  overwhelming  task  at  best  and  budget 
crushing  There  are  so  many  options  out  there,  so  much  technical  jargon  to 
sort  through,  not  to  mention  the  onslaught  of  pricing  plans  and  add-ons.  Then 
there  are  the  questions:  “How  can  I  be  sure  I  am  getting  up  to  date  technol¬ 
ogy?”  “Will  it  cost  me  a  fortune  in  upgrades  and  add-ons  later?”  “What  fea¬ 
tures  are  really  important  for  a  business  my  size?”  Below  are  some  tips  to  help 
you  make  the  right  choice. 

AltiServ™  Office  IP  PBX.  Editors  at  PC  Magazine  chose  AltiServ  Office  as 
the  number  one  phone  system  for  small  to  mid-sized  businesses.  Why? 
Because  companies  get  more  with  AltiServ  Office  for  a  single  price  than  they 
can  get  from  any  other  phone  system.  It  is  an  easy  to  use,  totally  reliable,  and 
award-winning  platform,  which  manages  voice,  Internet,  email,  and  contact 
centers  with  no  extra  charges  for  computer  integration  and  external  servers.  In 
addition,  AltiServ  Office  supports  IP  and  standards-based  analog  telephones 
offering  up  to  500  extensions  per  location. 

Get  more  than  you  pay  for.  For  small  businesses,  a  low  cost  of  ownership 
is  critical.  Easy-to-manage  phone  systems  like  AltiGen’s  AltiServ™  Office  IP 
PBX  make  it  possible  for  an  IT  manager  via  software  to  quickly  make  changes, 
allowing  companies  to  grow  without  regularly  paying  for  expensive  techni¬ 
cians.  Also,  we  include  at  no  extra  charge  features  like  Voice  Mail,  Automated 
Attendant,  Automatic  Call  Distribution  and  CTI. 

Future  proof.  AltiGen's  IP  PBX  allows  you  to  integrate  your  computers, 
customer  contact  applications,  and  IP  networks  in  an  easy-to-use  converged 
communications  solution  that  works  with  traditional  analog  phones  and  IP 
phones.  So  you  can  use  migrate  at  your  own  speed  to  full  IP  or  just  where  in 
your  business  you  want. 

Plenty  of  room  to  grow.  AltiGen’s  modular  growth  capabilities  allow  your 
small  business  to  grow  to  a  larger  business  easily.  Should  you  grow  out  of 
your  first  system  chassis  another  system  chassis  can  be  added  and  you  can 
control  extensions,  voice  mail  and  other  features  from  a  single  software  adminis¬ 
trative  tool. 

Affordable  Multi-Location  networking  saves  communications  costs. 

AltiGen’s  Distributed  Intelligence  Network  Architecture  (DINA)  allows  you  to  tie 
your  all  of  your  offices  together  with  Voice  over  IP  saving  you  high  long  dis¬ 
tance  costs  and  allowing  your  users  to  call  each  other  as  if  they  were  under 
the  same  roof.  AltiGen’s  DINA  Multi-system  Software  Manager  allows  you  to 
manage  all  of  your  systems  as  one  no  matter  where  they  are.  For  example, 


See  the  Benefits 


Desired  Features: 


AltiServ  Office  Traditional  Phone 

PBX  Systems 


Software-based  administration 

• 

IP.  digital  and  analog  trunking 

• 

digital  and  analog 

Standard  voice  calling 

• 

• 

IP  and  traditional  phone 

• 

traditional  phone 

Voice  mail 

• 

added  option 

Automatic  Call  Distribution  (ACD) 

E-mail 

Web  interactions  Web  push.  chat,  click-to-talk 

• 

• 

• 

added  option 

Home-based  agents/users  a 

Works  with  Defmity  and  AltiServ  PBX  aw 

Fault  Tolerance  (RAID)  a 

Integrated  Contact  Center  ^ 

Ivanhoe  Financial  is  a  fast  growing  mortgage  banking  firm  with  three  offices  in 
Orlando  Florida,  Herndon,  VA  and  Chicago,  Illinois.  They  operate  customer 
contact  centers  in  each  location.  It  wasn’t  always  this  way.  Ivanhoe  Financial 
started  operations  in  1999  with  only  6  people  in  Orlando  and  an  AltiGen  IP 
PBX  with  an  integrated  customer  service  contact  center.  Over  time  they  ex¬ 
panded  to  other  cities  installing  AltiGen  systems  that  provide  phone  service 
and  customer  contact  capability  and 
then  tied  all  of  their  offices  together 
by  connecting  the  AltiGen  systems  to 
the  Internet.  Now  Ivanhoe  employees 
can  call  each  other  over  the  Internet 
using  VoIP  by  just  dialing  3  digit  ex¬ 
tension  numbers.  The  net  result:  im¬ 
proved  operations  and  thousands  of 
dollars  saved  in  communications  costs. 

Reliability  is  critical.  Because  your 
phone  system  is  the  critical  link  be¬ 
tween  you  and  your  customers,  it 
must  be  reliable.  Atime-tested  system 
is  the  best  choice.  AltiGen  offers  proven 
reliability  including  built-in  redundancy. 

Improve  your  relationships  and 
sales  with  your  customers. 

AltiGen  offers  several  integrated,  affordable  and  robust  Contact  Center  software 
solutions  that  provide  tools  to  improve  the  productivity  of  the  people  in  your  com¬ 
pany  that  deal  directly  with  your  customers: 

AltiGen  provides  the  most  affordable  customer  contact  solutions  for  SMB’s. 

Our  contact  solutions  software  resides  on  the  same  server  as  the  PBX  thereby 
cutting  hardware  costs  over  other  contact  center  products.  AltiGen  can  pro¬ 
vide  contact  centers  up  to  1 50  agents  per  server.  Features  include  basic  voice 
calling,  automatic  routing  of  calls  to  agents,  agent  and  supervisor  interfaces, 
and  graphical  reports.  You  can  even  implement  formal  IP-based  multimedia 
contact  centers  integrating  voice,  email,  Web  interactions,  CRM  and  other  key 
applications  like  IVR  and  Voice  Call  Recording.  And  multiple  servers  can  be 
stacked  and  controlled  by  a  single  administrative  interface. 

Find  out  why  the  Gartner  Group  listed  AltiGen  as  the  number  one  shipper 
of  IP  PBX  lines  for  small-midsize  businesses.  We  designed  our  systems 
from  the  ground  up  to  be  easy  to  use  and  reduce  your  cost  of  communica¬ 
tions.  AltiGen  is  a  pioneer  in  the  converged  PBX  area  with  over  10,000  suc¬ 
cessful  customer  systems  installed  and  over  500,000  satisfied  phone  users. 
AltiGen  also  received  the  Deloitte  Touche  Fast  500  award  as  one  of  the  top  500 
fastest  growing  companies  in  the  US. 


The  # 1  phone  system 
for  small  to  mid-sized 
businesses. 


Learn  how  to  choose  a  best  of  breed  next  generation  phone  system. 


Request  our  white  paper  today  at: 

www.altigen.com/nw 

or  call  AltiGen  toll-free: 

1.888.258.4436 
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■  SERVICE  PROVIDER  DEVELOPMENTS 
AT  THE  JUNCTURE  BETWEEN  THE  ENTERPRISE 
AND  THE  NEW  PUBLIC  NETWORK 


■  Turnstone  Systems  last  week 
announced  the  availability  of  pro¬ 
gramming  interfaces  that  facilitate 
the  integration  of  Turnstone’s  ONYX 
Automation  Software  with  carri 
er  operations  support  systems. 

The  company  also  announced  an 
application  module  designed  to 
assist  network  operations  center 
personnel  in  the  testing  of  telecom¬ 
munications  services.  Turnstone's 
products  are  targeted  at  the  provi¬ 
sioning  and  maintenance  of  unbun¬ 
dled  network  elements.  About  10 
million  phone  lines  in  the  U.S.  today 
are  delivered  through  UNE  circuits, 
Turnstile  says.The  Turnstone  UNE 
management  system  is  designed  to 
reduce  or  eliminate  the  labor-inten¬ 
sive  steps  associated  with  the  deliv¬ 
ery  and  troubleshooting  of  whole¬ 
sale  services,  the  company  says. 

Turnstone's  software  will  be  avail¬ 
able  in  the  first  quarter  of  next  year. 

■  Ciena  last  week  said  Brocade 
Communications  had  verified  its 
online  transport  platform  as  inter¬ 
operable  with  Brocade's  storage- 
area  network  switches. 

Testing  was  conducted  at  the 
Brocade  interoperability  labs,  which 
support  end-to-end  interoperability 
and  performance  testing  of  SAN 
products  in  large,  multivendor  SAN 
environments.  Since  2000,  40  com¬ 
panies  have  certified  interoperabili¬ 
ty  with  Brocade's  SAN  gear. 

■  Cisco  last  week  posted  first-quar¬ 
ter  2003  earnings  one  cent  per 
share  better  than  expecta¬ 
tions,  although  flat  compared  with 
fourth-quarter  fiscal  2002.  For  the 
period  ended  Oct.  26,  earnings  were 
$1  billion,  or  14  cents  per  share,  on 
revenue  of  $4.8  billion.  Earnings  have 
more  than  tripled  and  revenue  is  up 
9%,  from  the  same  period  a  year 
ago,  but  flat  compared  with  fourth- 
quarter  2002.  Analysts  expected  the 
earnings  to  be  13  cents  per  share  on 
revenue  of  $4.8  billion.  Cisco  says 
sales  in  the  service  provider  market 
continue  to  be  challenging  because 
of  capital  expenditure  reductions. 


Gravy  train  from  China  slows 

Market  no  longer  a  respite  from  North  America  for  telecom  equipment  vendors. 


■  BY  SUMNER  LEMON 

Who  knows  how  these  things  get 
started? 

Was  it  the  slowdown  in  demand  for 
telecom  equipment  in  other  markets  that 
made  China  seem  so  hot?  Maybe  it  was 
that  magic  number:  a  largely  untapped 
market  of  1.3  billion  potential  customers. 
Or  perhaps  it  was  the  rented  police 
motorcades  with  their  flashing  lights  and 
sirens,  which  whisked  wide-eyed  execu¬ 
tives  from  their  hotel  suites  to  meetings 
with  senior  government  officials  that 
made  the  difference. 

However  it  happened,  telecom  equip¬ 
ment  makers  have  been  betting  on  China 
to  deliver  bullish  growth  in  the  years 
ahead,  especially  with  the  sluggish  mar¬ 
kets  in  North  America  and  the  rest  of  the 
world  because  of  sharply  reduced  carrier 
spending  and  shrinking  economies.  But 
there  are  signs  that  equipment  vendors 
could  be  headed  for  a  rude  awakening  if 
they  expect  the  high  rates  of  growth  seen 
in  recent  years  to  continue. 

These  days,  the  growth  of  China’s  tele¬ 
com  equipment  market  is  slowing  as  cap¬ 
ital  expenditures  have  fallen  by  nearly 


one-third,  and  analysts  see  no  sign  of  a 
bonanza  for  foreign  equipment  makers. 

“This  year  there  is  a  decline  in  the 
equipment  market  in  China,  that  is  very 
clear,”  says  Bertrand  Bidaud,  vice  presi¬ 
dent  of  telecommunications,  Asia-Pacific, 
at  Gartner. 

But  how  can  a  market  often  described 
as  one  of  the  world’s  fastest  growing  tele¬ 
com  equipment  markets  be  experiencing 
a  slowdown  in  growth?  The  slowdown  is 
the  result  of  several  factors.  On  one  hand, 
the  Chinese  market  is  not  as  large  as 
some  might  think  and  competition  has 
grown  fiercer,  both  from  overseas  and 
domestic  equipment  vendors.  In  the 
midst  of  growing  competition,  the  coun¬ 
try’s  dominant  fixed-line  carrier  was 
restructured  earlier  this  year  and  slowed 
its  capital-expenditure  spending.  To¬ 
gether,  these  factors  have  helped  put  the 
screws  on  equipment  vendors  already 
faced  with  tight  profit  margins  from  sales 
in  China. 

“Chinese  carriers  have  been  very  adept 
at  squeezing  costs  out  of  the  system  and 
playing  vendors  off  each  other,”  says 
Duncan  Clark,  managing  director  of  tele¬ 
com  consultancy  BDA  China. 


Bright  light 

The  market  for  SDH  and  WDM 
optical  equipment  in  Asia-Pacific 
region  is  expected  to  grow. 

Shipments  (in  billions) 


18 - $17.2 


1999  2000  2001  2002  2003  2004 


SOURCE:  RHK 

In  addition,  signs  of  slowing  growth 
have  begun  to  emerge  in  some  parts  of 
China’s  telecom  market.  Rural  areas  in 
the  country,  where  the  overwhelming 

See  Asia-Pacific,  page  46 


WaveSmith  Networks  names  CEO 

Former  Unisphere  COO  takes  the  helm. 


■  BY  JIM  DUFFY 

ACTON,  MASS.  —  WaveSmith  Networks 
last  week  named  former  Unisphere 
Networks  COO  Thomas  Burkardt  as  its 
chairman  and  CEO.  Burkardt  replaces 
company  founder  Robert  Dalias.who  will 
assume  the  role  of  CTO,  a  position  he’s  jug¬ 
gled  in  addition  to  his  role  as  CEO. 

Burkardt  left  Unisphere  15  months  ago 
and  has  been  investing  in  companies  and 
sitting  on  boards  —  including  Wave¬ 
Smith’s.  Burkardt  and  Dalias  also  worked 
together  at  Castle  Networks,  a  packet  tele¬ 
phony  start-up  that  Burkardt  co-founded 
and  was  acquired  by  Siemens  as  one  of 
three  small  companies  combined  to  form 
Unisphere. 

“We’ve  got  to  set  the  stage  for  this  com¬ 
pany  to  change  and  grow  as  we  get  into 
revenue”  Dalias  says. “We  couldn’t  be  bet¬ 
ter  positioned  at  this  point.” 


“This  is  what  I  enjoy  doing,”  Burkardt 
says.  “I  enjoy  building  a  business  and  a 
company  We’re  at  that  point  now  where  it 
really  makes  my  juices  flow.  We ’re  building 
a  business  for  the  long  haul  and  that’s 
what  keeps  me  excited,  that’s  what  I  enjoy” 
WaveSmith  recently  landed  $30  million 
in  funding,  including  $5  million  from 
Ciena,  which  will  sell,  service  and  support 
the  start-up’s  multiservice  edge  switches. 
WaveSmith  reportedly  is  gaining  mo¬ 
mentum  in  its  carrier  trials. 

Sources  say  WaveSmith  is  close  to  receiv¬ 
ing  a  contract  from  SBC  Communications 
for  a  multiservice  edge  buildout  valued  in 
the  tens  of  millions  of  dollars.  The  com¬ 
pany  is  a  finalist  for  a  major  next-genera¬ 
tion  frame  relay  buildout  by  Verizon  (see 
www.nwfusion.com,  DocFinder:  3052). 

Three  years  ago, during  the  heyday  of  the 
Internet  boom,  a  start-up  such  as  Wave- 
Smith  would  have  been  acquired,  Burk¬ 


ardt  says.  Now  the  company  faces  a  “criti¬ 
cal  juncture”  in  developing  a  business 
plan  to  generate  revenue  on  its  own, 
he  says. 

“We’ve  got  some  traction, we’ve  got  some 
funding,  that’s  great,”  Burkardt  says.  “Now 
we  have  to  prove  that  we  can  build  an 
operating  plan, stick  to  it, grow  the  revenue 
and  become  a  solid  business.” 

As  for  Dalias,  WaveSmith  officials  said 
management  has  been  spread  too  thin 
and  that  he  would  rather  plot  product 
strategy  than  run  day-to-day  operations.  ■ 

More  online5 

Before  it  landed  its  new 
CEO,  WaveSmith  got  some 
much-needed  funding.  See 
who  invested  and  how  it 
will  spend  the  money. 
DocFinder:  3f?5?> 
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Portions  of  the  pie 


Top  10  Asia-Pacific  markets  for  U.S.  telecom  equipment  in  2001. 


Total  market:  S6.4  billion. 
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majority  of  Chinese  live,  saw  a  dramatic 
slowdown  in  demand  for  fixed-line  ser¬ 
vices  earlier  this  year,  with  growth  drop¬ 
ping  by  41%  compared  with  the  previous 
year,  according  to  China’s  Ministry  of 
Information  Industry  (Mil). 

Perhaps  the  greatest  effect  on  equip¬ 
ment  spending  has  come  from  dominant 
fixed-line  carrier  China  Telecom,  which 
in  May  split  into  two  separate  entities: 
China  Telecom  and  China  Netcom. 

The  new  China  Telecom  operates  ser¬ 
vices  in  21  provinces  in  southern  and 
northwestern  China  and  holds  70%  of 
the  national  trunk  transmission  network 
assets  owned  by  the  former  China  Tele¬ 
com.  China  Netcom  combines  the  for¬ 
mer  operations  of  China  Netcom,  Jitong 
Communications  and  former  China 
Telecom  operations  in  10  northern 
provinces. 

This  restructuring  has  occupied  the 
attention  of  both  companies  and  has 
helped  put  the  breaks  on  growing 
Chinese  telecommunications  equipment 
spending.  By  the  end  of  September,  capi¬ 
tal-expenditure  spending  by  Chinese 
telecom  companies  reached  $11.6  bil¬ 
lion,  a  drop  of  31%  compared  with  the 
same  period  last  year,  according  to  Mil. 

Capital-expenditure  spending  in  2001 
totaled  $31.8  billion,  up  15.3%  from  2000, 
it  says. 

“The  restructuring  of  China  Telecom 
had  a  major  impact,”  Bidaud  says. 

“China  Telecom  is  still  the  major  pur¬ 
chaser  of  equipment  in  China,  and  the 
restructuring  pretty  much  meant  that  the 
year  was  lost  for  equipment  vendors,” 
he  says. 


Nevertheless,  the  outlook  for  equipment 
spending  and  subscriber  growth  in  some 
sectors  of  China’s  telecom  industry  re¬ 
mains  healthy,  even  if  expected  growth 
rates  will  be  slower  than  in  previous  years. 

Indeed,  sales  of  synchronous  digital 
hierarchy  and  wavelength  multiplexing 
optical  transport  equipment  in  the  Asia- 
Pacific  region  is  expected  to  almost  dou¬ 
bled  between  2002  and  2004. 

But  questions  remain  as  explosive  wire¬ 
less  subscriber  growth  in  recent  years 
has  given  way  to  maturing  markets  and 
more  complex  challenges,  such  as  grow¬ 
ing  market  segmentation. 

“I  think  the  key  question,  say  in  the 
mobile  area,  is  where  are  the  next  100 


million  mobile  users  coming  from,”  Clark 
says,  noting  that  China  still  holds  signifi¬ 
cant  potential  for  growth. 

Untethered  opportunities 

Mobile  telecom  is  one  area  where 
equipment  vendors  continue  to  win 
large  deals  from  Chinese  carriers.  In 
October,  many  companies,  including  Er¬ 
icsson,  Lucent,  Motorola  and  Nortel, 
signed  deals  with  China  United  Telecom¬ 
munications  (Unicom)  to  upgrade  its 
Code  Division  Multiple  Access  network 
to  the  CDMA2000  IX  standard.  The  an¬ 
nouncement  of  the  latest  CDMA  equip¬ 
ment  deals,  which  are  valued  together  at 
more  than  $1.2  billion,  will  see  Unicom 
expand  the  capacity  of  its  national 
CDMA  network  from  15.2  million  to  30 
million  subscribers. 

The  deal,  which  was  signed  in  New 
York,  represents  one  of  the  largest  single 
packages  of  telecom  equipment  deals 
that  Chinese  carriers  awarded  this  year. 
Its  announcement  was  made  to  achieve 
maximum  political  effect,  timed  as  it  was 
for  the  day  before  the  arrival  of  Chinese 
President  Jiang  Zemin  in  the  U.S.  for  a 
meeting  with  President  Bush. 

The  rollout  of  CDMA  in  China  has  long 
been  a  political  issue  between  the  U.S. 
and  China.  Various  political  disputes 
between  the  two  countries  helped  delay 
the  launch  of  CDMA  services  in  China 
from  the  mid-’90s  until  this  year,  despite 
the  U.S.  Department  of  Commerce’s  lob¬ 
bying  efforts,  Clark  says. 

“CDMA  has  been  a  political  football 
between  the  U.S.  and  China,”  he  says. 

Unicom  and  the  country’s  largest  mo¬ 
bile  operator,  China  Mobile  Com¬ 
munications,  operate  networks  based  on 
GSM.  When  Unicom  received  its  CDMA 


license  and  announced  plans  to  launch 
a  service  based  on  the  mobile-communi¬ 
cations  technology,  there  were  those 
within  the  company  who  saw  little  sense 
in  offering  comparable  services  based 
on  two  different  technologies. 

“There  was  resistance  and  there  still  is 
resistance  within  Unicom,”  Clark  says. 

Unicorn’s  CDMA  service,  which  covers 
330  cities,  has  gotten  off  to  a  rocky  start. 
Launched  in  January,  Unicom  had 
attracted  800,000  subscribers  by  April, 
including  440,000  subscribers  of  an  exist¬ 
ing  CDMA  network  that  Unicom  ac¬ 
quired  from  Great  Wall  Telecom,  a  com¬ 
pany  linked  to  the  Chinese  military. 
During  the  same  period,  Unicom  added  6 


million  subscribers  to  its  GSM  network, 
raising  questions  whether  the  provider 
would  be  able  to  meet  its  targets  of  7  mil¬ 
lion  subscribers  by  year-end. 

Slow  CDMA  subscriber  growth  has 
continued  to  plague  Unicom.  By  the  end 
of  September,  the  company  put  the  num¬ 
ber  of  its  CDMA  subscribers  at  2.3  mil¬ 
lion,  still  far  short  of  its  stated  target  but 
closer  to  analyst  expectations  of  be¬ 
tween  3  million  and  4  million  sub¬ 
scribers  by  year-end. 

Unicom  has  blamed  slower-than- 
expected  CDMA  subscriber  growth  on  a 
shortage  of  affordable  mobile  phones 
that  support  the  wireless  standard. 
Perhaps  hoping  to  avoid  a  repeat  of  that 
problem  when  Unicom  launches  its 
CDMA2000  IX  service  by  year-end,  the 
company  announced  in  September  a 
deal  with  Samsung  Electronics  —  which 
BDA  estimates  has  been  losing  handset 
market  share  to  domestic  competitors  — 
for  700,000  CDMA2000  lx  handsets  and 
said  the  two  companies  would  collabo¬ 
rate  on  development  and  marketing  of 
CDMA  phones. 

Revenue  on  the  rise 

One  bright  spot  for  Unicorn’s  CDMA 
network  is  subscriber  revenue,  which 
remains  higher  than  its  GSM  service.  For 
its  third  quarter,  ended  Sept.  30,  the  carri¬ 
er  reported  that  average  monthly  rev¬ 
enue  per  user  (ARPU)  for  its  CDMA  sub¬ 
scribers  was  $17.8  billion,  more  than 
double  the  $8.5  billion  it  earned  on  aver¬ 
age  from  subscribers  of  its  GSM  network. 

One  main  reason  for  the  lower  ARPU 
for  GSM  customers  is  the  growing  num¬ 
ber  of  prepaid  GSM  subscribers,  accord¬ 
ing  to  Unicom.  Prepaid  cellular  services 
let  customers  pay  in  advance  for  a  cer- 
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tain  amount  of  mobile  telecommunica¬ 
tions  access,  which  can  be  used  for 
either  voice  or  short  messages. 

Of  the  9.1  million  new  GSM  subscribers 
that  Unicom  reported  during  the  first 
three  quarters  of  2002,7.5  million, or  82%, 
were  prepaid  customers,  which  typically 
generate  less  revenue  for  carriers  than 
postpaid  subscribers.  That  brings  the 
number  of  Unicorn’s  prepaid  GSM  sub¬ 
scribers  to  18.01  million,  or  nearly  50%  of 
the  company’s  total  36.1  million  GSM 
subscribers,  the  company  says.  Unicom 
does  not  offer  a  prepaid  option  for  its 
CDMA  service. 

On  the  horizon 

Looking  ahead,  Unicorn’s  CDMA  service 
should  receive  a  boost  from  the  rollout  of 
CDMA2000  IX  technology,  which  offers 
higher  data  access  speeds  and  should 
help  attract  more  subscribers  if  the  expe¬ 
rience  of  carriers  in  South  Korea  and 
Japan  is  any  indication,  observers  say. 

In  addition,  Unicom  has  no  plans  to 
upgrade  its  GSM  network  to  General 
Packet  Radio  Service  capability,  which 
will  help  to  differentiate  the  carrier’s  GSM 
and  CDMA  services. 

“We  see  [CDMA2000]  IX  being  a  com¬ 
pelling  offering,”  Clark  says,  adding  that  it 
is  still  too  early  to  tell  exactly  how 
Unicorn’s  CDMA2000  IX  service  will  be 
received  and  what  its  future  prospects 
are.“Unicom  could  still  mess  this  up." 

Even  if  Unicorn’s  CDMA2000  IX  service 
fails  to  win  over  Chinese  subscribers, 
there  will  be  plenty  of  other  opportuni¬ 
ties  for  equipment  vendors  in  the  com¬ 
ing  years,  analysts  say.  Growth  in  equip¬ 
ment  spending  might  be  slowing  in 
China  compared  with  previous  years  but 
they  see  no  sign  to  an  end  of  spending 
on  telecom  equipment  in  the  foresee¬ 
able  future  as  China  advances  its  devel¬ 
opment  plans. 

Lemon  is  a  correspondent  with  IDG 
News  Service 's  Taipei  bureau. 


The  announcement  of  the  latest  CDMA  equipment 
deals,  which  are  valued  together  at  more  than 
$1.2  billion,  will  see  Unicom  expand  the  capacity  of 
its  national  CDMA  network  from  15.2  million  to  30 
million  subscribers. 


Make  every  step  count  for  more 


Nokia  security  appliances  simplify  network  security. 


Pre-installed,  pre-configured,  full  remote  management. 

Whether  they’re  being  used  for  VPNs,  firewalls,  intrusion  protection,  or 
Internet  traffic  management,  Nokia  appliances  are  delivered  ready  for 
implementadon.  Often,  the  only  on-site  requirements  are  powering  up  the 
appliance,  connecting  it  to  the  network,  and  entering  the  correct  IP  address. 
Our  easy-to  use,  GUI-based  remote  management  tools  cover  all  the  rest. 


Deep  collaboration  for  greater  peace  of  mind. 

Partners  like  Check  Point  Software  Technologies,  Internet  Security  Systems 
and  F5  help  us  coordinate  all  the  capabilities  of  their  applications.  That’s 
why  we  can  offer  our  customers  First  Call-Final  Resolution  support,  without 
the  usual  finger-pointing.  To  download  case  studies,  details  and  more, 
just  visit  www.nokia.com/ipsecurity/na. 


IMOKIA 

Connecting  People 


hts  reserved  Nokia  and  Nokia  Connecting  People  are 
be  Nokia  Corporation  Other  product  and  company  names 
trademarks  or  trade  names  of  their  respective  owners. 
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According  to  a  recent  ll)(l  renorl  on  the  clustering  and  availability  software  market.  \  KRITAS 
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SHAPING  YOUR  NETWORK 


G.SHDSL:  It's  like  ADSL,  only  better 

North  American  telcos  are  evaluating  new  international  standard  for  Internet  services. 


I  HOW  IT  WORKS 


G.SHDSL 

G.SHDSL  offers  higher  bandwidth  and  20%  to  30% 
longer  reach  than  ADSL. 


G.SHDSL  card  provides  downstream 
bandwidth  of  2.3M  bit/sec. 


Internet  or  private' 
ATM/IP  network 


G.SHDSL  card 


G.SHDSL  card 
four-wire  modem 

□ 


DS-3 

Sfj 

m) 

DSL  access 
device 


G.SHDSL  modem  at  enterprise  site  pro¬ 
vides  equal  bandwidth  upstream  to  the 
Internet  or  service  provider  network. 


Enterprise 


■  BY  DONALD  SKIPWITH 

G.SHDSL  is  a  new  international  standard 
for  single-pair,  high-speed  DSL,  as  defined 
in  the  ITU-T  Standard  G.991. 2.  Unlike  asym¬ 
metric  DSL,  which  was  designed  for  resi¬ 
dential  applications  in  which  more  band¬ 
width  is  delivered  downstream  (to  the 
house)  than  is  available  upstream  (to  the 
Internet),  G.SHDSL  is  symmetrical  —  offer¬ 
ing  2.3M  bit/sec  in  both  directions. 

This  makes  G.SHDSL  better-suited  for 
business  applications,  which  require  high¬ 
er-speed  bandwidth  in  both  directions. 

G.SHDSL  combines  the  positive  aspects 
of  existing  copper-based,  high-speed  com¬ 
munications  with  the  benefits  of  increased 
data  rates,  longer  reach  and  less  noise. 

Todays  North  American  private  line, 
frame  relay  and  Internet  services  for  busi¬ 
ness  applications  typically  are  served  by 
T-l  —  1.544M  bit/sec  access  lines. T-l  tech¬ 
nology  moved  from  Alternate  Mark  In¬ 
version/Bipolar  8  Zero  Substitution  (AMI/ 
B8ZS)  coding  to  high-bit-rate  DSL  (HDSL) 
in  the  early  1990s.T-l  AMI/B8ZS  was  a  two- 
pair  (four-wire)  technology  with  limited 
reach,  requiring  a  signal  regenerator  (re¬ 
peater)  3,000  feet  from  the  central  office 


Got  great  ideas 


■  Network  World  is  looking  for  great 
ideas  for  future  Tech  Updates.  If  you 
have  one  and  want  to  contribute  it  to  a 
future  issue,  contact  Features  Editor 
Neal  Weinberg  (nweinberg®  nww.com). 


and  another  every  6,000  feet. 

T-l  repeaters  are  expensive  to  purchase, 
install  and  maintain,  but  are  required  to 
deliver  T-l  service.  HDSL  applied  the  new 
ISDN-based  modulation  scheme  —  2 
Binary  1  Quaternary  —  to  T-l  communica¬ 
tions,  which  resulted  in  transmission  up  to 
approximately  9,000  feet  without  the  need 
for  repeaters.  North  American  telephone 
companies  quickly  migrated  to  HDSL  to 
save  the  cost  of  one  or  two  repeaters. 

In  the  rest  of  the  world,  business  applica¬ 
tions  are  typically  served  by  E-l,  at  2.048M 
bit/sec.  Europe,  where  business  customers 
usually  are  within  reach  of  the  central 
office,  has  not  migrated  as  quickly  to  HDSL 
transport. 

But  Europe,  along  with  the  rest  of  the 
world,  did  want  to  take  advantage  of  the 
advances  being  made  in  the  DSL  world 
and,  through  the  International  Telecom¬ 
munications  Union, sanctioned  the  specifi¬ 


cation  of  G.SHDSL  to  provide  increased 
bandwidth  with  reduced  noise. 

Today  U.S.  business  DSL  lines  are  predom¬ 
inantly  asymmetric  DSL  (ADSL)  —  the  resi¬ 
dential  technology  with  deliverable  data 
rates  that  cap  out  at  384K  bit/sec  for  sym¬ 
metrical  service.  North  American  tele¬ 
phone  companies  are  evaluating  G.SHDSL 
technology  for  Internet  services  targeted  at 
small  to  midsize  companies,  offering  data 
rates  of  786K,  1.544M  and  2.3M  bit/sec. 
These  Internet  services  will  offer  a  reduced 
service-level  agreement  compared  with  T-l 
or  E-l  services,  at  a  lower  monthly  cost. 

Four  factors  are  driving  the  interest  in 
G.SHDSL: 

Standardization:  The  industry  needs  a 
higher-speed  digital  transport  service  for 
business  applications.  HDSL  was  never 
adopted  as  an  international  standard. 
Symmetric  DSL  —  introduced  as  the  DSL 
service  for  businesses  in  the  late  1990s  — 


never  became  a  standard  and  interfered 
with  the  residential  ADSL  service  because 
it  was  spectrally  incompatible  (very  noisy). 
G.SHDSL  is  positioned  for  deployment  in 
Internet  and  T-l/E-1  infrastructure  applica¬ 
tions  because  of  its  international  standard¬ 
ization. 

Improved  data  rate:  G.SHDSL  offers  a 
two-wire  standard  operating  at  2.3M  bit/sec 
and  four-wire  standard  operating  at  4.6M 
bit/sec.  HDSL,  when  initially  introduced, 
provided  1.544M  bit/sec  with  four  wires. 
G.SHDSL  offers  roughly  three  times  that 
and,  when  compared  with  the  newer 
HDSL2  and  HDSL4  services  (1.544M 
bit/sec  over  two  wires  or  four  wires),  still 
provides  significantly  more  bandwidth. 

Improved  reach:  G.SHDSL  generally  pro¬ 
vides  20%  to  30%  increase  in  reach  over 
HDSL  at  the  same  deliverable  data  rates. 
Additionally,  when  G.SHDSL  multilink  tech¬ 
nologies  are  used, such  as  four-wire,  Inverse 
Multiplexing  for  ATM  and  permanent-virtu¬ 
al-circuit  bonding,  G.SHDSL’s  reach  is  more 
than  double  HDSL’s. 

Spectral  compatibility:  G.SHDSL  is  spec¬ 
trally  compatible  with  ADSL,  causing  little 
noise  or  crosstalk  between  cables.  There¬ 
fore,  G.SHDSL  services  can  be  mixed  with 
ADSL  in  the  same  cables  without  much  — 
if  any  —  interference. 

G.SHDSL  quickly  has  caught  on  in 
European  markets,  and  the  major  North 
American  local  exchange  carriers  will  roll 
it  out  soon. 

Skipwith  is  vice  president  of  business 
development  at  Symmetricom.  He  can 
be  reached  at  DSkipwith@symmetricom 
.com. 


Dr.  Internet  By  Steve  Blass 

We  are  trying  to  build  a  VPN.  At  our  first  location 
we  have  a  Windows  98  machine  connected  to  the 
'Net  We  set  this  machine  as  a  dial-up  server  and 
added  user  TSTWAN  with  no  password.  The  mac¬ 
hine  has  a  static  DNS  name,  www.tstmyconnection 
.com,  which  we  created  using  trial  software.  The 
second  location  has  users  trying  to  connect  to  the 
first  location  using  a  VPN  connection  with  the  user 
name  TSTWAN.  We  get  Error  751:  “The  remote  com¬ 
puter  refused  the  VPN  connection."  If  we  change 


the  DNS  to  a  different  name  (such  as  www. 
tstmybogusname.com),  we  get  a  different 
error  message.  What  can  we  do? 

The  751  error  might  be  the  result  of  an  intermedi¬ 
ate  device  refusing  to  handle  the  packets.  Verify 
that  the  machines  at  the  second  location  map  your 
static  www.tstmyconnection.com  host  name  to 
the  correct  IP  address  using  ping  or  nslookup.  If 
not,  try  the  server  IP  address  in  the  dial-up  connec¬ 


tion  server  identification  dialog.  Also,  put  a  pass¬ 
word  on  your  TSTWAN  account  to  make  the  test 
more  realistic  and  verify  that  the  client  settings 
exactly  match  the  server  settings  for  the  VPN. 
Also,  the  Point-to-Point  Tunneling  Protocol  ports 
need  to  be  open  on  a  firewall  for  traffic  to  flow. 

Blass  is  a  network  architect  at  Change 
@Work  in  Houston.  He  can  be  reached  at 
dr.internet@changeatwork.com. 
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Do  you  know  what  Web  content  is  on 
your  company’s  computers?  It 
seems  a  simple  enough  question, 
but  it  turns  out  that  all  sorts  of  content 
gathered  from  all  sorts  of  sites  accumu¬ 
lates  as  you  and  your  co-workers  peram¬ 
bulate  around  the  ’Net.  The  problem  is 
some  of  this  content  is  not  appropriate 
and  can  represent  legal  liability. 

Let  us  make  a  digression  here  and  point 
you  to  a  story  in  Wired.  The  story  (www. 
nwfusion.com,  DocFinder:  3057)  is  about  a 
cop  who  is  about  to  do  time  for  down¬ 
loading  kiddie  porn.  While  we  do  not 
defend  his  actions,  the  fact  is  that  many  of 
us  who  do  research  on  the  Internet  could 
find  ourselves,  unwittingly  in  a  similar  situ¬ 
ation.  The  plethora  of  pop-ups  that  some 
sites  generate  can  download  images  and 
other  content  that  could  easily  cause  prob¬ 
lems.  One  lesson  the  Wired  article  shows  is 
that  if  the  feds  want  to  get  you,  they  only 
need  one  piece  of  evidence.  From  the 
story: “One  click,  you’re  guilty’ an  FBI  agent 


Content  snitch 


says. “A  federal  offense  is  that  easyf 

Even  if  the  hidden  content  on  your  sys¬ 
tems  isn't  a  federal  offense,  there  is  a  lot  of 
content  that  could  lead  to  sexual  harass¬ 
ment  issues  or  simply  contravene  com¬ 
pany  policies.  And  while  you  could  just 
purge  the  content 
from  systems,  there 
is  often  the  need  to 
find  out  what  peo¬ 
ple  are  viewing. 

But  how  to  ident¬ 
ify  the  “iffy”  content? 

“Problematic”  pic¬ 
tures  can  be  hard  to 
find  when  tens  of 
thousands  of  image 
files  are  involved. 

And  then  there  are 
URLs,  text,  audio  and  video  files.  In  short,  a 
tool  is  needed,  and  Gearhead  has  been 
experimenting  with  a  pretty  good  one. 

The  tool  is  Snitch  Professional  from  Hy¬ 
perdyne  Software.  Snitch  runs  on  PCs  and 
can  examine  local  and  mapped  drives  so 
you  could  scan  shares  on  the  other  ma¬ 
chine.  It  can  detect  “interesting”  content 
on  your  system  in  several  ways.  It  knows 
what  file  types  need  to  be  examined  (text, 
video  and  audio,  and  Snitch  also  checks 
the  names  and  text  content  of  files  to  see 
if  they  use  any  words  such  as  !A%# 


To  identify  text. Snitch  has  a  default  list  of 
keywords  and  phrases  considered  sus¬ 
picious  or  obscene.  These  keywords  are 
used  in  filename  and  URL  searches.  You 
can  create  and  rate  your  own  keywords 
and  add  them  to  the  list. 

Snitch  also  can 
detect  skin  tones  in 
images  through  the 
company’s  Skin- 
Scan  technology. 
SkinScan  looks  for 
tone  patterns  that 
indicate  exposed 
flesh  and  works  re¬ 
markably  well.  Im¬ 
ages  can  be  or¬ 
dered  and  browsed 
by  their  SkinScan 
rating,  letting  you  find  the  images  most 
likely  to  contain  nudity. 

You  also  can  browse  by  subdirectory 
location,  size,  date,  alphabetically  or  by 
type  of  obscenity, and  click  on  a  checkbox 
next  to  each  image  to  add  them  to  the  list 
of  those  to  be  deleted  or  reported. 

One  thing  we  noticed  was  the  “Display 
only  suspicious  images”  option  sometimes 
missed  images  that  should  have  been 
found  (a  nude  woman  overlaid  with  text 
from  a  pop-up  ad),  while  other  quite  inno¬ 
cent  images  turned  up  (President  Bush 


GEARHEADSCORECARD 


Product:  Snitch  Professional 
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Vendor:  Hyperdyne  Software 

www.hyperdynesoftware.com 
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standing  in  front  of  a  blackboard). 

Note  that  videos  are  not  subjected  to  im¬ 
age  scanning,  but  they  are  identified  and 
can  be  ordered  and  browsed  (video  brow¬ 
sing  is  the  slowest  content-auditing  opera¬ 
tion). Snitch  has  no  internal  support  for  AVI 
and  MOV  files  so  it  can’t  provide  a  preview 
of  the  first  frame  as  a  thumbnail  and  in¬ 
stead  displays  a  huge  red  “X.” 

Snitch  also  can  examine  archives  (ZIP 
and  ACE)  and  apply  the  other  detection 
features  to  the  compressed  content. 

Finally,  Snitch  can  report  on  URLs  with 
identified  keywords  (although  cookies 
are  ignored). We  were  surprised  that  on  all 
the  machines  we  scanned,  we  found  URLs 
that  contained  obscenities  and  often  asso¬ 
ciated  images. 

Snitch  was  quite  an  eye-opener  for  us 
and  definitely  a  useful  tool  for  companies 
that  want  to  make  sure  inappropriate  con¬ 
tent  isn’t  being  kept  on  corporate  PCs. 
Performance  is  good  —  Snitch  scanned 
75,000  files  on  our  PC  in  40  minutes  in  the 
background.  The  Personal  version  ($30) 
differs  from  the  Professional  version  ($70) 
in  that  it  cannot  produce  reports,  doesn't 
support  custom  keywords  and  cannot 
search  compressed  files. A  trial  version  also 
is  available. 

Tel I  tales  to  gearhead@gibbs.com. 


Cool 

Quick  takes 
on  high-tech  toys 

By  Keith  Shaw 


Toshiba's  new  projectors  lower  the  price  bar 

Toshiba’s  Computer  Systems  Group  recently  announced 
two  digital  projectors  that  start  at  $1,300  and  offer  1,400 
lumens  of  brightness.TheTLP-S30U  andTLP- 
T50MU  also  include  a  400- 
to-1  contrast  ratio,  SVGA 
(800-by-600-pixel)  and 
XGA  ( 1 ,024-by-768-pixel) 
resolution  (SVGA  for  the 
S30U;  XGA  for  the  T50MU). 
The  projectors  weigh  about  5 
pounds.  The  S30U  starts  at  $1,300, 
theT50MU  at  $2,200.  For  more  infor- 
mation.go  to  www.csd.toshiba.com. 


Toshiba's  new  low- 
priced  projectors 
come  with  400-to-1 
contrast  ratio. 


HP  announces  Media  Center  PC  models 

Hewlett-Packard  recently  announced  its  line  of  HP 
Media  Center  PC  models  that  run  Microsoft’s  Windows  XP 
Media  Center  Edition.  HP  says  Media  Center  Edition  lets 
Media  Center  PC  users  access  digital  entertainment,  such 
as  live  television  with  a  free  electronic  program  guide,  up 
to  90  hours  of  personal  video  recording,  digital  music,  dig¬ 
ital  video,  DVDs  and  photos. 

HP  says  the  Media  Center  PC  can  connect  to  a  TV  in 
cases  where  users  want  a  PC  and  television  in  the  same 
space.  The  new  Media  Center  PC  models  include  Intel 
Pentium  4  processors,  and  have  a  six-in-one  media  card 
reader  on  the  front  panel  to  transfer  digital  data  from  sev¬ 


Nokia's  new  phone  has  flip-up 
keyboard 

Nokia  has  announced  phones  it  will 
ship  over  the  next  six  months.  One  that 
caught  my  eye  was  the  Nokia  6800,  a  mo¬ 
bile  unit  with  a  cover  that  flips  over  the 
screen  and  reveals  a  keyboard. The  device 
can  be  used  for  information  management, 
messaging  and  other  text  inputs. 

Other  features  include  support  for  the 


The  Nokia  6800  flips  open 
to  reveal  a  keyboard  that 
eases  text  input. 


eral  flash  memory  formats. 

The  873n  model  will  be  sold  in  retail  stores  in  the  U.S. 
and  Canada.  The  863n  (value  model)  and  883n  (perfor¬ 
mance  model)  will  be  sold  directly  from  HP  through  its 
Web  site  (www.hpshopping.com)  or  in  retail  kiosks. 


D-Link  updates  wireless  broadband  router 

D-Link  Systems  has  announced  its  AirPlus  Enhanced  2.4- 
GHz  Wireless  Broadband  Router  (DI-714P+),  a  wireless 
unit  with  up  to  22M  bit/sec  speed  and  a  four-port  10/100 
Ethernet  switch,  hardware  firewall  and  built-in  print  server. 

Aimed  at  the  small  office/home  office  and  home  mar¬ 
kets,  the  router’s  print  server  takes  the  burden  of  printing 
off  a  PC,  D-Link  says.  The  router  also  lets  multiple  users 
securely  share  files,  Internet  access  and  peripherals,  and 
has  a  Web-based  interface  for  configuration. 

It  integrates  stateful  packet  inspection  to  check  that  in¬ 
coming  data  is  not  malicious,  D-Link  says.  Transmissions 
can  be  filtered  for  content  based  on  media  access  control 
address,  IP  address  and  domain  name.  VPN  passthrough 
support  is  provided  for  IP  Security,  Layer  2  Tunneling 
Protocol  and  Fbint-to-Fbint  Tunneling  Protocol  sessions. 
The  router  also  supports  64-,  128-  and  256-bit  Wired 
Equivalent  Privacy  encryption  for  wireless  security 

The  router  will  be  available  by  the  end  of  this 
month  through  retailers  for  about  $140.  Go  to 
www.dlink.com  for  details. 


Multimedia  Messaging  Service  (MMS),  Java  downloading, 
a  stereo  FM  radio  and  a  color  display  The  phone  will  work 
on  the  GSM/General  Packet  Radio  Service  networks  in 
Europe,  Asia  and  Africa,  and  shipments  are  set  to  begin  in 
the  first  quarter  of  next  year. 

Via  its  Pop-Port  connector,  the  6800  also  will  support 
Nokia’s  Camera  Headset,  an  add-on  attachment  that 
merges  a  mobile  headset  with  a  digital  camera. The  head¬ 
set  will  let  users  send  digital  images  as  MMS  messages  to 
other  MMS-enabled  phones. 

U.S.  users  won’t  get  to  use  the  phone,  but  1  wouldn’t  be 
surprised  to  see  future  models  sold  in  the 
U.S.  with  this  style  of  keyboard. 


Shaw  can  be  reached  at 
kshaw@nww.  com. 
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Winning  with  Linux®  and  Intel?  Online  diversified  financial  services  company  E*TRADE  Group,  Inc,  has  just 
installed  90  IBM  (©server  xSeries™  servers  running  Linux  to  support  their  E*TRADE  Financial  Web  site. 
Why?  Ease  of  use  and  Linux  driven  affordability  and  scalability.  Select  xSeries  models  feature  the  Intel  Xeon™ 
processor  to  give  you  superior  performance  and  cost-effectiveness. To  receive  a  complimentary  IDC  white  paper 
on  how  to  reduce  TOO  with  Linux,  head  over  to  ibm.com/eserver/etrade  fs  ^  ^  py  ^  ^  - 

All  numbers  and  results  reported  are  from  customer  sources.  This  customer  example  Is  intended  as  an  illustration  only.  Costs  and  results  obtained  in  other  customer  environments  will  vary  depending,  among  other  things,  on  individual 
customer  configurations  and  conditions.  IBM,  the  e-business  logo,  e-business  is  the  game.  Play  to  win  and  xSeries  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation.  Linux  is  a  registered 
trademark  of  Linus  Torvalds.  Intel,  the  Intel  Inside  logo  and  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  Other  company,  product  and  service  names  may 
be  trademarks  or  service  marks  of  others.  ©  2002  IBM  Corporation.  All  rights  reserved. 
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John  Dix 

Sun  CTO 

^  contemplates 


the future 


Attending  a  briefing  with  Greg  Papadopoulos,  Sun’s 
CTO.  is  like  stepping  into  an  MIT  classroom.  He 
loves  to  talk  about  where  we’ve  been,  where  we’re 
going  and  why. 

A  question  he  gets  a  lot  today  is:  Is  innovation  dead?  In 
a  word,  no.“It  is  a  far  more  interesting  time  in  R&D  than 
two  years  ago,”  he  says.“In  hypergrowth  you’re  focused 
strictly  on  tactics.  How  do  I  make  more  stuff?  Today, you 
get  to  think  about  the  important  problems  and  where  we 
are  going  to  be  in  the  next  two,  four,  five  years.” 

We’re  at  the  beginning  of  a  phase-change  in  computing, 
he  says.  If  the  1980s  were  all  about  the  PC  and  the  1990s 
were  about  the  rise  of  symmetric  multiprocessing  servers, 
this  decade  we’ll  witness  the  arrival  of  what  he  calls  the 
network-scaled  computer. 

Pushing  us  toward  this  future  is  an  80/20  rule.  Eighty 
percent  of  IS  dollars  goes  to  operations  today  and  only 
20%  goes  to  capital  expenditures,  Papadopoulos  says. 
Fifteen  years  ago  it  was  more  like  50/50.  We’ve  created 
complex  infrastructures  that  cost  too  much  to  maintain. 

Another  problem  is  the  infrastructure  is  underutilized. 
Systems  are  often  running  at  15%  to  20%  of  capacity,  he 
says,  while  the  ideal  would  be  up  around  80%. 

What  we  need  to  do,  Papadopoulos  says,  is  get  beyond 
the  habit  of  dedicating  systems  to  applications.  We  need 
to  be  able  to  virtualize  computing  resources  and  use 
them  as  needed,  just  like  we’re  starting  to  do  with  storage. 

He  drew  a  diagram  of  a  tiered  system  architecture 
with  firewalls/load  balancers  at  the  front  feeding  Web 
servers  that  are  tied  to  application  servers,  which  are 
ultimately  linked  to  servers  and  legacy  systems  that 
share  a  back-end  storage-area  network. 

To  treat  this  collage  as  a  network-scaled  computer  that 
will  accommodate  the  needs  of  the  moment,  you’ll  need 
code  on  all  of  the  piece  parts  and  a  control  plane  to 


Job  search  reality 

Regarding  Chuck  Yoke’s  column  “IT  jobs  still 
abound,  if  flexible”  (www.nwfusion.com,  Doc- 
Finder:  3044):  While  it’s  easy  to  say  that  being  will¬ 
ing  to  relocate,  become  an  SNA  expert  and  accept 
$20,000  less  than  you  were  previously  making  will 
increase  your  odds  of  landing  a  job,  the  reality  is 
decidedly  different.  IT  cutbacks  have  occurred  in 
almost  every  sector  of  the  country  Why  would  an 
employer  in,  say,  Houston  even  want  to  look  at  a 
networking  person  from  Seattle  when  he  had  more 
than  enough  local  candidates?  The  employer  also 
probably  already  has  resumes  from  seasoned  SNA 
experts  and  at  the  very  least  would  be  looking  for 
someone  with  SNA  experience. 

As  far  as  accepting  a  salary  $20,000  lower  than 
your  last  job  —  the  employer  would  probably  think 
you  would  only  stick  around  until  the  economy  got 
better  and  then  bolt. 

Gary  Braver 
Principle  consultant 
Fastlane  Networks 
Newton,  Mass. 

Yoke  replies:  I  agree  that  the  willingness  to  relocate 
and  take  a  lower  salary  is  no  guarantee  of  a  job. 
Most  companies  in  larger  metropolitan  areas  are 
focusing  on  local  candidates  because  there  is  a 
large  pool  of  available  workers,  and  employers  in 
these  areas  might  be  skeptical  of  a  candidate  willing 
to  take  a  lower  salary.  However,  even  in  these  areas, 
savvy  employers  are  starting  to  realize  that  the 
salary  bar  has  lowered  and  probably  never  will  go 
back  to  previous  levels,  even  if  the  economy  turns 
around.  Many  employers  are  starting  to  see  some¬ 
one  willing  to  take  a  lower  salary  as  a  realistic  per¬ 
son  adapting  his  outlook  and  lifestyle  to  the  new 
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economic  conditions. 

I  also  get  calls  regularly  from  recruiters  looking  for 
people  with  specific  skills  or  experience  that  are  not 
available  locally.  The  majority  of  the  calls  are  not  for 
jobs  in  large  metropolitan  areas,  where  the  number 
of  potential  qualified  applicants  is  large.  They  are 
from  small  to  midsize  metropolitan  areas  where 
companies  that  could  not  pay  previous  competitive 
wages  are  looking  for  more  experienced  workers 
willing  to  accept  a  lower  salary  in  return  for  job  sta¬ 
bility.  While  there  are  no  guarantees,  the  willingness 
to  relocate  to  these  areas  and  accept  a  lower  salary 
opens  the  door  to  these  potential  opportunities. 

Gigabit  issues 

Regarding  Kevin  Tolly’s  column  “Gigabit  to  the 
desktop:  A  decision  you  can’t  escape”  (DocFinder: 
3045):  Companies  that  grow  to  become  major  play¬ 
ers  inevitably  seem  to  reach  the  point  where  they 
attempt  to  lead  the  market  in  a  “better  direction.” 
Now  we  have  Dell  pulling  an  end  run  around  net¬ 
work  managers  by  installing  Gigabit  Ethernet  cards 
in  all  its  plug-and-play  boxes  and  professing  that 
Gigabit  is  the  new  desktop  standard. 

Cabling  infrastructure  will  be  a  major  issue. 
Troubleshooting  will  be  an  issue,  too,  because 
many  popular  network  tools  can’t  do  Gig.  And 
jumping  from  100M  to  1000M  bit/sec  will  not  be  as 
easy  as  the  jump  from  10M  to  100M  bit/sec  was. 

It  sounds  like  Dell  has  been  watching  too  many 
SUV  commercials: “Filmed  on  a  closed  circuit  with 
professional  drivers  —  don’t  try  this  at  home  — 
performance  may  vary’’ Just  read  the  fine  print  from 
Dell’s  FAQ  Web  page:  “Note:  Actual  data  transfer 
speeds  depend  on  the  network  design  and  traffic 
plus  the  system/PCI  slot/processor  configuration.” 

Phil  Phrshall 
Network  technician,  IT  department 
Roswell  Park  Cancer  Institute 
Buffalo,  N.Y 


More  online!  www.nwftision.com  Find  out  what  readers  are  saying  about  these  and  other  topics.  DocFinder  3043 


orchestrate  the  efforts. 

On  the  software  side,  Papadopoulos  says  the  shift  to 
Web  services  should  help  reduce  operations  costs  by 
making  developers  more  productive.  Instead  of  building 
to  operating  systems,  developers  increasingly  are  build¬ 
ing  to  Web  service  components  that  sit  on  top  of  the 
operating  system, such  as  application  servers,  directories, 
databases  and  messaging  tools. 

While  it  will  take  years  for  the  development  community 
to  completely  shift  to  this  model,  Papadopoulos  says  all 
computing  is  going  this  way 

A  compelling  vision.  But  the  question  is,  how  much  will 
it  cost  you  to  get  there? 

—  John  Dix 
Editor  in  Chief 
jdix@nww.com 
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Looking  deeper: 

Intelligent  switches  go  beyond 

bandwidth  and  connectivity, 
delivering  benefits  to  a  company's  bottom  line. 

In  the  IT  world,  it’s  easy  to  get  caught  up  in  the  alphabet  soup  of 
computer  networking  features;  SNMP,  PVST,  HSRP — the  industry 
often  speaks  a  language  all  its  own. 

So  for  just  a  moment,  let’s  put  all  that  aside  and  use  an  acronym 
everyone  can  understand:  ROI.  Because  at  the  end  of  the  day,  that’s 
the  real  benefit  of  intelligent  switching— a  greater  return  on  your 
investments  in  technology. 

Intelligent  switching  isn’t  just  about  speeds  and  feeds.  It  isn’t  about 
acquiring  technology  for  technology’s  sake.  And  it’s  certainly  not 
about  being  the  first  company  on  your  block  to  deploy  something 
cutting-edge.  Rather,  it’s  about  adding  brainpower  to  your  networking 
muscle,  so  you  can  get  more  value  out  of  the  business  tools  you  have, 
and  easily  deploy  new  ones  in  the  future. 

The  key  advantage  of  intelligent  switching  is  the  ability  to  look  deeper 
into  streams  of  data,  to  gain  a  more  complete  understanding  of  the 
traffic  flowing  through  the  network. 

As  a  result,  organizations  can  implement  differentiated  services  based 
on  users,  applications,  and  individual  policies.  They  can  prioritize  traffic, 
allocate  bandwidth,  and  control  access  as  they  see  fit.  They  can  adapt 
to  changing  requirements,  whether  it’s  a  routine  shifting  of  priorities 
based  on  time  of  day  or  a  major  deployment  of  new  technology. 

High  availability,  advanced  quality  of  service,  enhanced  security,  and 
improved  manageability  are  part  of  the  intelligent  switching  story.  But 
the  bottom  line  is  that  intelligent  switching  gives  organizations  the 
power  to  align  their  networks  with  business  goals,  quickly  and  easily. 


A  Smarter  Breed  of  Switch 


Insight,  knowledge,  an  ability  to  base  actions  on  a 
richer  source  of  information— it's  hard  to  avoid 
describing  the  advantages  of  intelligent  switching 
in  human  terms. 

But  the  simplest  tool  for  communicating  the  benefits 
of  intelligent  switching  may  be  the  Open  Systems 
Interconnect  (OSI)  reference  model.  Developed  in  the 
1980s,  the  OSI  model  provides  a  standard  seven-layer 
framework  for  the  design  of  networking  systems. 


The  OSI  Model 


Layer  7:  Application 
Layer  6:  Presentation 
Layer  5:  Session 
Layer  4;TVanaport 
Layer  3:  Network 
Layer  2:  Data  Link 
Layer  1 :  Physical 


The  majority  of  LAN  switches  in  use  today  are  known 
as  Layer  2  switches  because  they  utilize  information 
from  the  second  layer  of  the  OSI  model.  This  informa¬ 
tion— specifically,  MAC  address  headers— is  attached 
to  every  data  packet  streaming  through  a  network.  It 
tells  the  switch  what  devices  are  involved,  and  the 
switch  uses  that  information  to  forward  data  and 
apply  network  services. 


Intelligent  switches  look  deeper  into  the  data  packets 
to  identify  users  and  applications.  In  doing  so,  they 
utilize  not  only  Layer  2  information,  but  Layer  3  IP 
information  and  Layer  4  port  information.  In  certain 
cases,  they  can  even  utilize  Layer  5  through  7  infor¬ 
mation  to  gain  a  more  detailed  understanding  of  how 
applications  are  being  used. 


In  short,  these  multilayer  intelligent  switches  can  see 
where  a  data  packet  originated,  where  it's  destined, 
what  it  contains,  and  where  it  stands  in  relation  to  an 
organization's  network  policies  and  business  priorities. 


That's  what  makes  them  intelligent— the  ability  to 
forward  data  and  apply  services  based  on  a  deeper 
understanding  of  the  millions  of  data  packets  stream¬ 
ing  through  the  network  at  any  given  moment. 


Cisco  Systems 


/ 
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High  Availability 

Over  the  last  several  years,  businesses  have 
grown  increasingly  dependent  on  their  networks, 
to  the  point  where  their  daily  routines  now  rely  on 
the  immediate,  24-hour  availability  of  electronic 
data  and  applications.  For  most,  it's  no  longer  a 
matter  of  convenience,  but  of  survival. 

Yet,  we  often  take  network  availability  for  granted, 
the  same  way  we  assume  we'll  get  a  dial  tone 
every  time  we  pick  up  a  phone.  Only  when  some¬ 
thing  goes  wrong  does  the  full  extent  of  our 
dependence  hit  home. 

Cisco  Catalyst  intelligent  switches  lend  the  highest 
levels  of  availability  and  resiliency,  from  core  to 
edge.  With  them,  companies  can  improve  network 
fault  tolerance,  decrease  link  convergence  times, 
and  optimize  bandwidth  utilization— enhancements 
that  become  even  more  critical  as  organizations 
move  toward  converged  voice,  video,  and  data 
networks. 

If  one  component,  power  supply,  or  connection 
fails,  another  can  take  over,  enabling  the  network 
to  continue  operating  at  100  percent  of  its  normal 
performance  level.  Service  level  agreements  can 
still  be  met,  productivity  can  be  maintained,  and 
business  can  move  forward  without  interruption. 

Cisco  Catalyst  intelligent  switches  also  offer 
scalable  bandwidth,  up  tol 0  Gigabit  Ethernet,  so 
!  organizations  can  maintain  predictable  perform¬ 
ance  levels  as  a  network  grows  and  evolves. 

The  impact  of  network  downtime  should  not  be 
underestimated.  A  recent  Sage  Research  study  of 
52  large  service  providers— companies  that  are 
keenly  aware  of  the  importance  of  around-the- 
clock  availability— found  that  98  percent  of  the 
respondents  had  experienced  some  incidents  of 
downtime  during  the  previous  12  months. 

Based  on  overtime  expenditures,  consultant  fees, 
penalties  for  breached  service  level  agreements, 
and  other  costs,  Sage  estimated  that  network 
downtime  cost  these  organizations  an  average  of 
$21.8  million  dollars  a  year— or  $2,169  a  minute. 

X  _ 


Of  course,  in  today’s  culture  of  strict  cost-cutting,  the  mere  suggestion 
of  a  network  upgrade  might  raise  eyebrows.  But  as  one  multinational 
corporation  recently  discovered,  it’s  actually  a  prudent  choice. 

Like  many  organizations,  this  company  was  faced  with  a  network 
infrastructure  that  no  longer  supported  all  of  its  business  and  net¬ 
working  needs,  much  less  its  plans  to  incorporate  future  technologies. 
So  the  company  considered  three  options:  First,  do  nothing.  Second, 
pursue  a  moderate  upgrade  of  switches  at  the  network  core.  Third, 
step  up  to  Cisco  Catalyst®  intelligent  switches. 

The  company’s  executive  team  concluded  it  was  well  worth  the 
expense  to  migrate  to  intelligent  switches,  because  the  move  offered 
immediate  gains  in  efficiency.  It  would  also  allow  the  company  to 
rapidly  deploy  new  applications,  and  bring  greater  resiliency  to  the 
organization.  Without  intelligent  switches,  the  company  would  fail  to 
realize  the  full  return  on  its  $150  million  investment  in  applications. 

Obviously,  no  two  organizations  are  the  same,  and  each  should  conduct 
its  own  analysis.  But  many  will  reach  the  same  verdict:  intelligent 
switching  makes  financial  sense. 

That’s  crucial,  because  technology  that  doesn’t  deliver  a  measurable 
return  on  investment  is  just  an  extravagance,  and  for  most  companies, 
these  are  not  extravagant  times.  Businesses  may  face  complex  choices, 
but  their  goals  are  relatively  simple:  drive  up  productivity  and  drive 
down  costs. 

Over  the  past  several  years,  corporations  have  grown  increasingly 
reliant  on  networks  to  achieve  business  goals.  The  federal  government 
estimates  that  U.S.  productivity,  which  grew  at  an  average  pace  of  1 .2 
percent  a  year  from  1974  to  1995,  accelerated  2.5  percent  a  year  from 
1995  to  2000,  a  surge  that  coincides  with  the  widespread  deployment 
of  networking  technology. 

More  recently,  Cisco  Systems  asked  researchers  at  the  University  of 
California  at  Berkeley,  The  Brookings  Institution,  and  Momentum 
Research  Group  to  quantify  the  economic  benefits  of  the  Internet.  In  a 


The  Cisco  Catalyst  family  runs  the  range  from  chassis  to  stackable  switches,  with 
models  available  to  address  special  requirements,  such  as  support  for  inline  power 
and  Gigabit  Ethernet  over  copper. 


report  released  earlier  this  year,  the 
research  team  concluded  that  the  adop¬ 
tion  of  Internet  business  solutions  had 
yielded  cumulative  cost  savings  of  $155 
billion  to  U.S.  organizations.  This  first-of- 
its-kind  analysis,  known  as  the  Net 
Impact  Study ,  projected  an  additional 
$373  billion  in  future  cost  savings,  most 
of  it  to  be  realized  by  2005. 
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But  these  productivity  gains  come  at  a  price.  The  proliferation  of 
powerful  desktop  computers,  bandwidth-intensive  applications,  and 
new  devices,  such  as  IP  phones  and  wireless  access  points,  has  left 
networks  (and  network  managers)  straining  to  keep  up.  With  each 
new  user,  device,  or  solution  added  to  a  network,  the  underlying 
infrastructure  comes  under  that  much  more  stress. 

Unpredictable  traffic  patterns  can  emerge,  bogging  down  critical 
applications.  Holes  can  appear  in  security,  leaving  the  network  vulner¬ 
able  to  internal  and  external  threats.  And  demand  for  bandwidth  can 
outstrip  the  supply,  causing  one  bottleneck  after  another. 


Advanced  QoS 


Quality  of  service,  or  QoS,  offers 
something  that  raw  bandwidth 
can't— the  ability  to  prioritize  the 
delivery  of  critical  network 
resources.  Adding  bandwidth  cer¬ 
tainly  helps  speed  things  along,  but 
QoS  ensures  that  network  capacity 
is  used  in  the  smartest  way  possible, 
coordinating  traffic  to  align  it  with 
business  goals. 

Using  the  multilayer  capabilities  of 

Cisco  Catalyst  intelligent  switches,  organizations  can  set  policies  that  allocate 
bandwidth  and  apply  network  services  based  on  users  and  applications,  so 
the  most  important  traffic  is  handled  accordingly,  without  leaving  anything  or 
anyone  else  out  in  the  cold. 


Delay-sensitive  applications  such  as  voice,  video,  and  real-time  transactions 
can  be  given  priority  over  less  important  traffic.  Service  levels  can  be  met, 
regardless  of  what  else  happens  on  the  network.  Critical  applications  can 
even  be  protected  against  sudden  surges  in  traffic. 

To  provide  true  end-to-end  QoS,  Cisco  Catalyst  intelligent  switches  classify 
and  mark  packets  at  the  network  edge,  inserting  tags  that  tell  other  network 
devices  how  traffic  should  be  handled.  Packets  may  be  re-marked  as  they  move 
across  the  network,  providing  additional  information  that  will  be  evaluated 
against  network  conditions  and  business  policies  to  prioritize  traffic, 
alleviate  bottlenecks,  and  control  the  rate  at  which  individual  hosts  and 
streams  are  transmitting. 


At  the  same  time,  advanced  QoS  features  lend  networks  greater  flexibility, 
making  it  easy  to  adjust  to  changing  requirements  and  priorities.  So  easy,  in 
fact,  that  policies  can  shift  according  to  time  of  day,  accommodating  different 
business  needs  and  patterns  of  network  usage. 


End-to-end  QoS  keeps  traffic  moving  in  the  most  efficient  manner  possible.  It 
can  even  delay  the  need  to  deploy  more  bandwidth  by  enabling  companies  to 
make  better  use  of  their  existing  connections. 


Enhanced  Security 


Statistics  show  hackers  are  not  the  only  threat  to 
network  security.  Disgruntled  employees  pose  an 
increasing  risk  to  network  resources,  and  even 
the  most  devoted  worker  can  unwittingly  pass  a 
computer  virus  to  the  rest  of  the  organization. 

So  Cisco  Catalyst  intelligent  switches  enable 
companies  to  direct  their  defense  systems  inward 
as  well  as  out,  providing  unprecedented  control 
over  access  to  data,  applications,  and  the  configu¬ 
ration  of  the  switches  themselves. 

Rather  than  presuming  access,  Cisco  Catalyst 
intelligent  switches  support  identity-based  network 
access,  giving  organizations  the  ability  to  address 
three  vital  security  issues: 

•  Authentication:  Is  the  user  supposed  to  have 
network  access? 

•  Authorization:  What's  the  user  permitted  to  do? 

•  Accounting:  Who  else  is  using  the  network,  and 
what  are  they  doing? 

Cisco  Catalyst  intelligent  switches  also  feature 
integrated  intrusion  detection  systems,  firewalls, 
and  virtual  private  network  services,  eliminating 
the  need  for  separate  security  devices.  The  multi¬ 
layer  capabilities  of  these  switches  enable  them 
to  look  deeper  into  traffic  for  signs  of  hackers, 
viruses,  and  denial-of-service  attacks,  and  to  take 
immediate  action  to  protect  the  network  after  a 
breach  is  detected. 

These  precautions,  as  intense  as  they  might  seem, 
are  warranted.  In  a  study  released  earlier  this 
year,  the  FBI  and  the  Computer  Security  Institute 
surveyed  503  U.S.  computer  security  practitioners 
in  the  public  and  private  sectors,  and  found  that  90 
percent  had  detected  security  breaches  within  the 
previous  12  months. 

The  most  commonly  reported  security  problems 
included  computer  viruses  (85  percent),  employee 
abuses  of  network  resources  (78  percent),  system 
penetration  by  hackers  (40  percent),  and  denial-of- 
service  attacks  (40  percent). 

The  range  of  security  features  supported  by  Cisco 
Catalyst  intelligent  switches  reflects  a  belief  that 
no  single  point  of  defense  can  guarantee  data 
privacy  and  protection;  for  true  network  security, 
an  end-to-end  approach  is  required. 
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Cisco  Catalyst  intelligent  switches  enable  organizations  to  avoid 
these  and  other  problems  by  easing  network  migration,  adaptation, 
and  expansion.  They  provide  the  availability  and  resiliency  required 
to  keep  network  resources  available  around  the  clock,  the  advanced 
quality  of  service  needed  to  prioritize  traffic  based  on  business  needs, 
and  the  enhanced  security  necessary  to  protect  the  network  from 
myriad  risks,  both  internal  and  external. 

Cisco  Catalyst  intelligent  switches  also  simplify  the  deployment  of 
intelligent  services,  offering  an  unprecedented  level  of  control  while 
streamlining  all  aspects  of  network  management,  so  thinly  stretched 
IT  departments  can  do  more  with  less. 

At  the  same  time,  Cisco  Catalyst  intelligent  switches  offer  a  unique 
level  of  investment  protection.  Cisco  Systems  is  one  of  the  largest 
R&D  spenders  in  the  world,  giving  our  engineers  the  resources  to 
build  upon  established  products  and  technologies.  That  ensures 
customers  can  use  their  existing  infrastructures  as  technologies 
evolve,  and  avoid  deploying  something  that  won’t  be  supported 
over  the  long  haul. 

The  result:  a  scalable,  affordable,  easy-to-manage  path  to  end-to-end 
intelligence  across  the  LAN  and  WAN.  And  that  translates  into 
benefits  you  can  actually  see  on  the  bottom  line.  All  you  have  to  do 
is  look  a  little  deeper. 


Learn  how  intelligent  switching  can  bring  new 
levels  of  productivity  and  efficiency  to  your  organization. 

www.nwfusion.com/gocs/wp1102 


Cisco  Systems 


Copyright  ©  2002,  Cisco  Systems,  Inc.  All  rights  reserved.  Cisco,  Cisco  Systems,  Cisco  IOS,  and  the  Cisco  Systems  logo 
are  registered  trademarks  or  trademarks  of  Cisco  Systems,  Inc.  and/or  its  affiliates  in  the  U.S.  and  certain  other  countries. 
All  other  trademarks  mentioned  in  this  document  or  Web  site  are  the  property  of  their  respective  owners.  The  use  of  the 
word  partner  does  not  imply  a  partnership  relationship  between  Cisco  and  any  other  company.  (0208R) 


Manageability 

From  an  engineering  standpoint,  intelligent 
switching  is  an  extremely  sophisticated,  extraor¬ 
dinarily  complex  technology.  From  a  network 
management  perspective,  however,  it  can  be 
exceptionally  easy  to  use. 

That's  because  Cisco  Catalyst  intelligent  switches 
simplify  and  centralize  configuration,  monitoring, 
and  troubleshooting  across  the  entire  network. 
They  offer  more  granular  control  over  network 
resources,  while  simultaneously  streamlining 
administrative  tasks.  This  not  only  makes  it  possi¬ 
ble  to  govern  the  myriad  availability,  QoS,  and 
security  features  supported  by  Cisco  Catalyst 
intelligent  switches,  but  makes  it  easy  to  deploy 
applications  and  uniformly  configure  a  network. 


Cisco  Web-based  tools  make  it  easy  to  deploy 
and  manage  end-to-end  intelligent  services. 


Cisco  Catalyst  intelligent  switches  give  organiza¬ 
tions  the  visibility  to  see  the  impact  of  the  network 
policies  and  priorities  they  establish,  and  the 
flexibility  to  fine-tune  things  as  they  go  along. 

They  can  get  more  out  of  their  networks  today, 
and  do  a  better  job  of  planning  for  the  future. 

Cisco  Catalyst  intelligent  switches  use  Cisco  IOS1 
Software,  providing  a  solid  foundation  for  Internet 
applications,  and  enabling  companies  to  extend 
common  services  and  interfaces  across  the  entire 
network  to  reduce  training  and  management  costs. 

Meanwhile,  CiscoWorks  Web-based  tools  support 
remote  monitoring,  configuration,  fault-detection, 
and  troubleshooting  through  an  easy-to-use 
interface.  Cisco  management  software  simplifies 
and  automates  the  delivery  of  intelligent  services 
throughout  the  network,  regardless  of  the 
organization's  size. 

As  a  result,  IT  personnel  can  save  tremendous 
time  managing  their  LANs  for  a  lower  cost  of 
ownership,  even  as  they  optimize  network 
performance,  increase  availability,  and  tighten 
security. 
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SERVICE  PROVIDERS 

I  Nick  Lippis _ 


Take  control  of  the  infrastructure 


With  WorldCom  in  Chapter  1 1  and  other  big  bankruptcies  on  the 
horizon,  the  service  provider  world  is  in  a  highly  uncertain  state. 
What  can  network  executives  do  to  protect  their  companies? 
First  and  foremost, service  quality  almost  certainly  will  suffer  in  these 
urbulent  times.so  diversification  of  service  providers  is  essential.  Audit 
/our  enterprise  nets  to  ascertain  which  service  providers  are  being 
jsed  for  which  services,  and  at  what  cost. Try  to  share  the  pie  with  as 
nany  service  providers  as  possible.  It’s  time  to  re-evaluate  service 
provider  contracts  that  provide  discounts  for  longevity  and  volume, 
Decause  flexibility  and  carrier  diversity  should  be  design  goal  No.  1. 

It’s  also  time  to  take  control  of  communications  back  from  the  service 
Droviders.  During  the  late  '90s,  there  was  a  shift  to  using  carrier  services 
or  most  enterprise  communications.The  balance  of  build  vs.  lease  for 
enterprise  communications  should  tilt  back  toward  build,  and  steeply. 
Two  parts  of  the  enterprise  net  that  should  change  quickly  are  voice 
ind  private  wide-area  data  networking.In  the  voice  area, economic  effi¬ 
ciency  and  increased  productivity  through  collaborative  communica- 
ion  applications  has  been  proven  with  open  IP  telephony  offerings.We 
jre  at  the  stage  where  IP  telephony  products  can  be  extended  over 
videarea  IP  nets,  reducing  toll  cost  and  arbitraging  private  line  tariffs. 
Also,  there  is  a  shift  to  replace  private  wide-area  backbone  networks 
/vith  public  multihomed  Internet  services.  Explore  accelerating  this  shift 
vith  route  control  products.  Private  nets  are  expensive  in  terms  of  capi- 
al  equipment  and  operational  expenditures, static  in  configuration  and 
lot  flexible  enough  to  change  if  you  have  carrier  problems. 


For  intranet  and  extranet  traffic,  using  route  control  to  move  packets 
between  carriers  based  on  performance,  price,  delay  and  jitter  is  an 
excellent  insurance  policy  for  an  unstable  carrier  environment.  Private 
network  structures  can  be  reconfigured  with  route  control  into  multi¬ 
homed  public  ISP  connections  to  a  variety  of  service  providers  deliv¬ 
ering  control,  diversity  lower  cost  of  ownership  and  piece  of  mind 
while  the  service  provider  industry  changes.  Route  control  brings  pre¬ 
dictable  performance  to  ISP  links,  letting  companies  move  IP  tele¬ 
phony  VPN  and  other  traffic  over  this  infrastructure  and  between  sites. 

Things  are  going  to  get  worse  before  they  get  better,  but  there  is  light 
at  the  end  of  the  tunnel  in  2004. After  the  telecom  industry  goes  through 
capital  restructuring  and  executive  management  change-out,  chances 
are  it  will  re-emerge  stronger. 

The  main  message  is  this:  Don’t  run  and  hide;  you  need  to  be  aware 
of  these  events  and  plan.  Take  control  of  your  communications  infra¬ 
structure  and  start  thinking  about  building  services  rather  than  leasing 
them  from  service  providers.  IP  telephony  and  route  control  are  two 
inter-related  technologies  of  the  new  enterprise  communication  infra¬ 
structure  that  can  deliver  control,  reduce  cost  and  increase  diversity 
during  very  unpredictable  times. 

This  column  is  an  abbreviated  version  of  the  Lippis  Report  #007.  To 
read  the  full  report,  register  at  www.lippis.com.  Lippis  is  an  industry  con¬ 
sultant  who  works  with  CIOs  of  Global  2000  companies.  He  can  be 
reached  at  nick@Iippis.com. 


Things  are  going 
to  get  worse 
before  they  get 
better,  but  there 
is  light  at  the  end 
of  the  tunnel  in 
2004. 


YANKEE  INGENUITY 

Howard  Anderson 


he  people  running  the  cable  industry 
must  be  the  luckiest  SOBs  on  the  face  of 
the  earth.  They  don’t  really  know  what 
they  are  doing  and  are  almost  inept  techni¬ 
cally  —  yet  they  step  in  a  pot  of  gold  every  few 
years.  The  cable  industry  didn’t  even  under¬ 
stand  the  Internet  two  years  ago  and  had  to 
De  led  kicking  and  screaming  to  offer  cable  modems. 

Last  month  at  The  Yankee  Group’s  Future  of  the  Network  conference, 
heard  doom  and  gloom  but  no  boom.  There  was  the  usual  array  of 
stars  —  Bill  Esrey  of  Sprint,  Ivan  Seidenberg  of  Verizon,  Dave  Dorman  of 
\T&T.  Each  of  these  honchos  stated  that  only  the  financially  strong  will 
iurvive  (them,  of  course)  and  predicted  another  40  miles  of  bad  road, 
t’s  a  sorry  state  when  the  industry  lusts  after  WorldCom’s  bankruptcy 
Decause  shedding  all  the  debt  might  give  them  an  advantage. 

The  cable  guys, on  the  other  hand, are  popping  open  champagne  and 
spending  some  money  raising  rates  and  building  infrastructure  —  in 
act,  they  are  the  only  ones  investing  in  voice,  data  and  video.  They 
haven't  hurled  away  their  future  by  paying  $150  billion  for  worthless  3G 
icenses.  Sure,  the  cable  industry  players  are  being  challenged  by 
DirecTV  and  Echostar,  which  are  growing  15%  per  year,  but  cable  still 
las  a  virtual  monopoly  The  cable  companies  also  are  taking  market 
share  from  the  telephone  companies  at  long  last.SBC  Communications 
ost  3  million  access  lines  last  year  —  about  5%  of  its  installed  base; 
v'erizon  lost  3.5%. 

OK, so  the  cable  guys  got  lucky  and  cable  modems  are  neat.  But  now 
:omes  Part  2:  video  on  demand.  1  know,  you’re  tired  of  hearing  about 
something  that  has  never  happened,  but  it’s  going  to  start.  Every  tele- 
Dhone  company  supplier  that  1  know  —  and  I  know  them  all  —  is  try- 
ng  to  retool  for  the  cable  industry;  they're  thinking  about  the  National 
Cable  Television  Association  Show  and  the  Western  Cable  Show  and 
ithdrawing  from  NetWorld  and  Comnet. 

Are  the  industries  different?  Certainly  —  but  not  that  different.  The 
able  providers  understand  video  and  entertainment  and  the  next 
equipments  for  interactivity.  In  addition,  new  technology  is  working  for 


Enter  the  cable  carpetbagger 


them  —  in  storage  and  in  lowering  the  costs  of  delivering  advanced 
video  services.  And  finally,  the  consumer  has  changed:  The  success  of 
“The  Sopranos”  proves  that  people  have  gotten  used  to  paying  for  sub¬ 
scription  services. 

And  these  cable  companies  are  going  to  need  lots  of  infrastructure. 
They  need  massive  storage  systems,  enough  to  handle  maybe  100,000 
hours  of  programming,  and  they  have  to  be  able  to  stream  content  to 
as  many  as  1  million  homes  in  real  time.  Want  to  watch  “West  Wing”  on 
Tuesdays,  not  Wednesdays?  No  problem.  At  8  p.m.,not  9?  No  problem. 
Want  to  stop  the  movie?  Rewind?  Watch  it  over  two  days?  Again,  no 
problemo. Video  on  demand  is  just  a  gateway  to  television  on  demand 
or  content  on  demand. The  cable  guys  have  already  built  in  the  digital 
infrastructure,  and  maybe  a  third  of  them  will  have  access  to  these  ser¬ 
vices  by  2005.  Furthermore,  the  cable  companies  has  never  actually 
paid  dividends,  like  the  telcos,  so  they  can  keep  investing  and  reinvest¬ 
ing  with  all  their  cash  flow. 

Subscription  video  on  demand,  voice  telephony  and  television  on 
demand  are  all  services  that  your  local  cable  company  will  provide  by 
2005.  When  you  want  to  understand  where  the  growth  is  coming  from, 
this  is  the  place. 

The  cable  companies  have  some  public  relations  problems  that 
everyone  knows  about  —  such  as,  their  customers  hate  their  guts.They 
have  service  delivery  billing  and  price-gouging  problems.  Agreed.  But 
they  do  have  one  asset:  a  virtual  monopoly  that  is  profitable  enough  to 
finance  their  next  big  moves  into  subscription  video  on  demand  and 
to  carry  with  it,  almost  as  an  afterthought,  voice  communications. 

Intel  Chairman  Andy  Grove  used  to  say,  “Only  the  paranoid  will  sur¬ 
vive.”  Bill  Esrey  says, “Only  the  financially  strong  will  survive.”  Maybe  the 
real  answer  is, “Only  the  lucky  will  survive.” 


The  cable  compa¬ 
nies  have  some 
public  relations 
problems  that 
everyone  knows 
about  -  such  as, 
their  customers 
hate  their  guts. 


Anderson  is  senior  managing  director  of  YankeeTek  Ventures,  a 
Cambridge,  Mass.,  venture  capital  fund  for  early-stage  technology  com¬ 
panies.  He  is  also  founder  of  The  Yankee  Group  and  the  William  Porter 
Distinguished  Lecturer  at  the  Massachusetts  Institute  of  Technology.  He 
can  be  reached  at  handerson@yankeetek.com. 
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OneTouch  m  Series  II 
Network  Assistant 

NETWORKSUPERVISIO 


NetTool ™ 

Inline  Network 
Tester 


There's  never  been  a  better  time  to  see  how  Fluke 
Networks  handheld  test  tools  can  turn  your  team 
into  powerful  problem  solvers.  Now's  the  time  to 
check  out  the  most  powerful  line  of  network  trou¬ 
bleshooting  tools  ever  designed.  Tools  for  everything 
from  connectivity  testing  to  fixing  traffic  jams  and 
configuration  snafus.  Why  now?  Because  they  can 
also  show  you  some  other  amazing  vistas.  Like  a  free 
trip  to  see  Paris  from  the  Eiffel  Tower.  Rio  from  Sugar 
Loaf  Mountain.  Japan  from  Mt.  Fuji.  Zimbabwe  from 
Victoria  Falls.  Or  the  Grand  Canyon  from  the  South 
Rim.  It's  the  perfect  opportunity  to  see  more  of  your 
world  at  play  —  and  more  of  your  world  at  work.  So 
go  to  www.flukenetworks.com/vista  now  and  take 
a  tour  of  our  new  troubleshooting  solutions.  Then 
register  to  win  the  trip  of  a  lifetime.  Bon  voyage! 


LinkRunner"" 

Network 

Multimeter 


LinkRunner 


Go  to  www.flukenetworks.com/vista  to  take  a 
virtual  tour  and  enter  to  win  a  trip  of  a  lifetime! 

For  official  rules  and  regulations  go  to  www.flukenetworks.com/vistarules 
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The  Best  Issue  is  one  of  six  bin'/. ... 
meets  providing  insights,  opinir/'f 
tion  on  the  biggest  trends  shaping  ih*. 
worked  world.  Watch  for  tire  Powo  Issc : 
annual  compilation  of  the  mostpowedir  ;«• 
companies  and  technologies  :n  nc-tw 
coming  Dec.  23-30. 


B  Never  let  It  rest 

Inevitably,  as  I  prep  our 
annual  Best  Issue,  this 
childhood  rhyme  plays 
through  my  mind:  "Good, 
better,  best.  Never  let  it  rest.  Until  the 
good  is  better,  and  the  better,  best." 

Although  written  to  encourage  child¬ 
ren,^  rhyme's  message  could  be  more 
consistently  demonstrated  in  our  industry. 

The  grim  truth  we  learned  this  year  is 
that  the  idea  of  excellence  can  be  grossly 
distorted  in  the  pursuit  of  becoming  the 
biggest  or  the  best.  The  WorldCom  execu¬ 
tives  who  hugely  misrepresented  corpo¬ 
rate  finances  to  maintain  the  company's 
image  as  a  premier  carrier  stand  as  the 
most  extreme  case.  More  pervasive  is  the 
practice  of  forcing  substandard  fare  down 
users'  throats  while  proclaiming  its  excel¬ 
lence.  For  companies  that  routinely  do  this, 
being  first  to  market  outweighs  being  best. 

As  the  economy  slugs  on,  the  drive  to 
move  good  to  better  and  better  to  best 
stands  the  chance  of  being  forgotten  alto¬ 
gether.  Crimped  budgets  spur  shortcuts. 
Testing  cycles  shrink.  Problems  get 
worked  around,  not  fixed.  Make-do  atti¬ 
tudes  become  commonplace.  Eventually, 
"better"  is  good  enough,  and  then  "good" 
passes  muster. 

Yet,  being  the  best  always  means 
excelling  over  all  others.  You  shouldn't  be 
settling  for  good,  or  even  better  —  not 
from  your  vendors,  your  network  or  your 
staff.  Never  let  that  rest. 


Fave  raves 

Five  network  pros  give  us  the  scoop  on  their  favorite  products,  tools  they  say 
are  simply  'the  best,' 


Bast  aFtha  tests 

Cool,  fast,  practical  and  more,  the  13  products  that  earned  our  2002  Best  of 
the  Tests  Award  exemplify  excellence. 


Go  to  our  Best  Issue  portal,  at  www.nwfusion.com/best/2002,  for 
more  stories  and  special  features.  You'll  find: 


User  Excellence:  Upgrade  ingenuity 

Royal  &  SunAHiance  USA  wins  the  2002  User  Excellence  Award  for  a  multifaceted 
network  project  that  turned  end  users  into  IT  partners,  while  saving  big  bucks. 


Fave  rave  Forum 

Find  out  what  products  Winn  Stephenson,  an  IT  executive  with  FedEx 
Services,  and  other  network  honchos  consider  their  favorites,  then 
throw  your  choice  into  the  mix.  DocFinder:  3021 


Beth  Schultz,  editor.  Signature  Series 
bschultz@nww.com 


User  Excellence:  Best  eF  the  rest 

The  U.S.  Department  of  Veterans  Affairs  and  Wells'  Dairy  earn  runners-up  sta¬ 
tus  in  the  2002  User  Excellence  Award  competition. 


Best  products  at  a  glance 

Download  an  at-a-glance  chart  of  the  products  profiled  in  Fave  raves, 
Best  of  the  tests  and  Wares  extraordinaire.  DocFinder:  3051 


Tap  tips  Far  skating  through  the 
telecom  me  It  damn 

Experts  share  their  best  ideas  for  keeping  your  network  safe  when  your  carrier 
is  on  thin  ice. 


Blare  User  Excellence  Bmard 
coverage 

Get  fun  facts  about  our  winner's  project,  full  runners-up  case  stud:, 
network  diagrams  and  quick  takes  on  more  than  a  dozen  honorable 
mentions.  DocFinders:  3039  and  3041. 


Signature  Sign-eFF:  Best  mays  to  keep 
your  cud!  [while  the  industry  loses  its] 

Experts  share  advice  on  how  to  maintaii  an  even  keel  no  matter  the  job  pressures. 


When  software  lets  you  use  data  to  personalize  customer  connections,  that’s  one  degree  of  separation.  The  myriad  of  choices 
available  to  online  consumers  is  staggering.  The  personal  service  available  at  traditional  businesses  is  largely  absent  online  and  the  pressure 
is  on  you  to  bring  it  back.  Microsoft®  solutions  for  Internet  business  provide  the  tools  you  need  to  build  stronger  relationships  with  your  global 
network  of  customers  and  trading  partners.  Scalable  user  and  content  profiling  allows  you  to  target  content  and  offer  more  personalized 
options  including  customer-specific  catalogs  with  custom  pricing  and  product  information. 

Now  it's  easier  for  you  to  aggregate  profile  data  from  multiple  underlying  data  sources  to  leverage  existing  technology  investments  and 
enable  richer  profiling  capabilities.  And  with  built-in  business  analytics,  you  can  analyze  ever-changing  user  behavior  to  predict  purchasing 
and  browsing  preferences,  all  while  delivering  real-time  recommendations.  Plus,  through  direct  support  for  XML-based  data,  companies  can 
exchange  catalog  and  order  information  and  integrate  order  fulfillment  systems  for  seamless  transactions.  Find  out  how  .NET  connected 
software  can  help  you  connect  with  your  customers  better.  Go  to  microsoft.com/enterprise  Software  for  the  Agile  Business. 


©  2002  Microsoft  Corporation  All  rights  reserved  Microsoft  and  BizTalk  are  either  registered  trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 
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The  Royal  Canadian  Mint  wanted  to  reach  its  diverse  worldwide  customers,  expand  sales  of  its  products,  and  deliver  a  highly 
customized  consumer  experience,  so  they  used  the  Web  content  management  capabilities  of  Microsoft  Content  Management 
Server  integrated  with  the  e-commerce,  personalization  and  backend  data  integration  capabilities  of  Microsoft  Commerce  and 

- N  BizTalk ®  Servers.  Now  the  Mint  can  publish  content  in  multiple  languages,  draw  on  customer 

information  from  its  legacy  database,  and  feed  online  orders  through  an  existing  ERP  system, 
enabling  the  Royal  Canadian  Mint  to  offer  customers  a  richer  and  more  personalized  experience. 
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FireProof  is  the  industry’s  first  security  Application  Switch 
that  ensures  the  integrity  and  operation  of  your  security 
infrastructure  across  the  enterprise.  Combining  load 
balancing,  optimization  and  high  availability  for  firewalls, 
VPNs  and  IDS  devices*  FireProof  eliminates  bottlenecks 
and  single  points  of  failure,  guaranteeing  full  availability, 
operation  and  optimized  security  devices.  FireProof's  DoS 
Shield  module  prevents  DoS  attacks*  while  maintaining 
high  throughput  on  users'  networks.  An  additional  layer  of 
defense  is  delivered  through  our  award  winning  application 
security  module*  preventing  more  than  450  attack  signatures. 


Firewall/VPN 
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FireProof 


FireProof 


Firewall/VPN 


Choose  FireProof  for  robust  enterprise  security. 
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toll  free:  1-888-234-5763  |  www.radware.com  |  info@radware.com 
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Ed  Mann,  vice  president  of  network  tech¬ 
nology  planning,  Prodential  Securities 

Years  in  networking:  27 

Product  choice:  Neoteris’  Instant  Virtual  Extranet 

Explanation:  “  Instant  Virtual  Extranet  is  a  [Secure  Sockets 
LayerJ-based  VPN  product  that  lets  people  securely  access 
Prudential  applications  and  our  network  using  any  browser. 
Users  authenticate  using  [RSA  Security]  SecurlD  tokens,  giv¬ 
ing  us  full  authentication,  but  they  don’t  need  a  laptop  with 
VPN  software  installed.  It’s  great  because  we  don’t  have  to 
deploy  a  VPN  client  to  everyone,  which  is  a  very  big  deal. 
Every  time  we  update  a  client,  we  have  to  get  it  out  to 
25,000  people,  so  Instant  Virtual  Extranet  gives  us  a  huge 
savings  from  that  perspective.  We  also  gain  the  flexibility 
and  the  functionality  of  being  able  to  access  important 
applications  from  anywhere.  It’s  definitely  a  best  tool  for  us. 


Years  in  networking:  16 

roduct  choice:  Cisco’s  Hoot  and  Holler  over  IP 

Exp  nation:  “  In  the  securities  business,  most  firms  use  ana¬ 
log  ‘hoot’  technology,  which  is  a  two-way,  always-on  confer? 
ence  bridge  that  lets  analysts  or  experts  speak  to  a  host  pf 
offices  and  give  them  up-to-date  information  on  eciuiti;es,>^ 
bonds,  etc.  The  problem  is,  it’s  very  expensive,  it’s  prdh^lg 
failure,  and  it’s  difficult  to  maintain. 

“Instead  of  analog,  Cisco  Hoot  and  ■H()Her',overTPtake^K 
voice,  wraps  it  up  in  TCP/IP,  sends  it  over  our  IP  data 

work  and  kicks  it  out  at  the  other  end  to  an  analog  Vdjis &WM 

. 

device.  It’s  saved  the  firm  >$1.5  million  annually  ystfn&jEm 
tional  analog  system.  Plus,  a  byproduct  has  been,  a 
cant  improvement  in  the  meantime  to  repair.- 
site  causes  a  problem,  we  can 

network  in  10  minutes  or  less.  In  the  past  ,  it  <  '■■i'A;;' 

leral  hours.  It's  been  a  big  win  for  us,  definitely  a  •*; 'J&Asgja 


Ed  Mann,  left,  and  Jim  White  of 
Prudential  Securities  name  their 
favorite  money-saving  products. 
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Erik  Towt,  network  analyst,  Denver  Broncos 

Years  in  networking:  5 

Product  choice:  Linksys  wireless  access  points  and  cards,  Compaq  iPaqs 

Explanation:  “Without  Linksys,  our  new  Broncos  Barn  wouldn’t  be  pos¬ 
sible.  Outside  the  stadium  before  games,  the  Broncos  Barn  provides 
entertainment  to  the  fans,  with  bands  and  food,  etc.  We  set  up  Linksys 
wireless  access  points  so  that  we  can  run  credit  cards  out  there. 
Basically,  it’s  in  the  middle  of  the  parking  lot  and  there’s  no  way  to 
run  data  out  there  without  ripping  out  hundreds  of  yards  of  asphalt. 
Using  Linksys  makes  the  lot  a  revenue  generator.  It’s  definitely  a  best. 

“Another  best  is  our  GamePlus  application.  In  each  luxury  box  in 
Invesco  Field,  we  have  a  computer  with  a  touch-screen  monitor  linked 
to  a  wireless  network.  We  pipe  out  video  replays,  other  NFL  games, 
various  stats,  explanations  of  rules  and  so  on.  It’s  very  interactive  and 
adds  a  lot  of  value  for  the  fans.  We’re  using  Compaq  iPaqs  for  the  sys¬ 
tem,  so  in  the  larger  suites,  we  can  leave  them  on  the  bar  and  people 
can  sit  there  and  play  with  them.  It  adds  entertainment  value,  and 
that’s  the  business  we’re  in.” 


Brian  Young,  CIO,  Hobart  and 
William  Smith  Colleges 

Years  in  networking:  8 

Product  choice:  Symantec’s  Norton  AntiVirus 
Enterprise  Edition 

Explanation:  “Given  the  context  of  an  educational 
institution  and  students  bringing  computers  to 
campus,  the  best  thing  ever  is  the  enterprise  edi¬ 
tion  of  our  antivirus  program,  Norton  AntiVirus. 

“We  clean  in  the  ballpark  of  8,000  viruses  off  of 
our  network  and  mail  system  every  day,  and  that 
is  8,000  viruses  that  don't  get  onto  campus, 
don't  tie  up  our  help  desk  and  don't  infect  other 
things  on  campus.  It  has  been  a  tremendous 
asset,  especially  in  terms  of  return  on  invest¬ 
ment,  with  the  savings  in  time,  resources  and 
personnel.  No  two  ways  about  it,  it's  the  best." 
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Jake  Star,  vice  president  of  computer  services, 

Mohegan  Sun  Resorts 

Years  in  networking:  16 

Product  choice:  NetScout  Systems’  nGenius 

Explanation:  “We've  just  finished  a  $1.2  billion  expansion  of  our  property, 
almost  tripling  the  size  of  our  network  and  physical  space.  That’s  made  us 
a  really  complicated  network,  and  one  thing  we  see  from  the  network  side 
is  that  the  applications  guys  tend  to  blame  problems  on  the  network.  In 
the  past,  when  this  would  happen,  we’d  get  a  protocol  analyzer  and  go 
out  to  wherever  the  issue  was  and  try  to  analyze  what  was  going  on.  With 
NetScout,  we  no  longer  have  to  do  that.  We  already  have  the  monitors  in 
place  and  whenever  someone's  blaming  something  on  the  network,  we 
can  immediately  look  at  the  traffic,  model  the  conversations  that  our 
applications  have  and  see  exactly  where  the  communication  breaks  down 
—  because,  of  course,  it’s  never  really  a  network  problem.  NGenius  is  the 
best  because  it  reduces  our  downtime,  which  is  money  to  us.  When  slot 
machines  are  down,  we  re  not  making  money.  ’’ 

Cummings  is  a  freelance  writer  in  Nofth  Andover,  Mass.  She  can  he 
reached  at  jocUmmings@attbi.com. 


fVMan  in  the  know. 

m 


move. 


Sagg?'* 

He  anticipates  his  clients’  every  need.  He  expects  the  same.  And  that's  just 


charge.  Since  his  cell  phone  ^  activated  on  the  network,  the  bank  could  get 


to  him  immediately  with  fcopy  of  the  transaction.  Tire  charge  was  legit. 


Yep,  he  was  spared  the  hassle  of  his  card  refused  in  front  of  clients  at  the 


clubhouse.  At  Nortel  Networks™  we  call  this  "the  engaged  business 
model."  And  we  make  it  possible  by  enabling  business  to  engage  their 
customers  through  delivering  critical,  time-sensitive  information  on 
whatever  device  they  prefer.  Before  they  even  know  they  need  it.  So 
businesses  can  win  the  loyalty  necessary  to  build  a  solid  revenue  base. 
Leveraging  solutions  like  contact  centers  and  application-aware 
switching.  Insuring  user  mobility  and  network  continuity.  Accelerating 
productivity  while  lowering  costs.  The  results:  customers  like  William 
become  customers  for  life.  All  delivered  by  our  enterprise  vision.  One 
network.  A  world  of  choice,  nortelnetworks.com/onenetwork 


NETWORKS 


nortelnetworks. corn 
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the  13  prbbbets  THar  Banana  the 
anna  best  or  the  tests  muana 
BXBmnieira  exeettehee. 


hu  nHMKTinR  huhhh  ann  keith  suaiu 

Network  World  bestows  its  Best  of  the  Tests  Award  distinction  on 
products  and  services  that  have  outperformed  similar  offerings  dur¬ 
ing  our  rigorous  hands-on  testing  from  Nov  1,2001,  to  Oct.  31, 2002. 


We  divided  the  more  than  230  tested  products 
and  services  from  170-plus  companies  into  13 
categories  based  on  market  focus.  Best  of  the 
Tests  categories  are:  enterprise  servers;  enter¬ 
prise  switching/routers;  ISP  services;  multimedia 
networking  wares;  network  management  soft¬ 
ware;  network  management  hardware;  remote- 
office  networking;  security  infrastructure;  secur¬ 
ity  tools;  voice  over  IP;  wireless;  Cool  Tools  hard¬ 
ware;  and  Cool  Tools  software.  The  latter  two 
designate  products  tested  as  part  of  our  weekly 
Cools  Tools  column,  a  glimpse  at  high-tech  net¬ 
work  gizmos  and  software  that  can  help  end- 
user  productivity. 

To  determine  the  winner  in  the  first  1 1  cate¬ 
gories,  we  looked  to  reviewers’  product  scores. 
The  highest-scoring  products  took  the  prize  — 
with  five  points  representing  a  perfect  score.  In 
cases  in  which  reviewers  awarded  multiple 


NetworkWorld 

BEST nr  THE 


SZZZE7 


products  the  same,  top  score,  Network  World 
editors  picked  the  product  that  outperformed 
or  outfeatured  the  others  in  the  test.  In  the  case 
of  Cool  Tools,  for  which  no  scoring  system 
exists,  columnist  Keith  Shaw  selected  the  prod¬ 
ucts  he  felt  significantly  would  affect  end  users 
or  the  market  for  the  better. 


Visual  Communicator  Plus  from 
Serious  Magic  changes  the  face  of 
personal  broadcasting  and  makes 
it  easier  for  users  to  create  their 
own  television  broadcasts  with  lit¬ 
tle  more  than  a  Web  camera  and  a 
decent  PC  desktop.  With  a  little 
imagination,  businesses  can  create 
broadcasts  for  communications  in 
professional  video  services  isn’t 


cases  when  spending  money  on 
feasible. 


Best  of  the  Tests  Award  winner:  Visual  Communicator  Plus 

Company:  Serious  Magic,  www.seriousmagic.com 

Date  reviewed:  July  22, 2002,  www.nwfusion.com,  DocFinder:  3027 

Reviewer’s  comment:  The  software  was  addictive.  We  kept  coming  up 
with  new  ideas  and  ways  to  use  it.  —  Keith  Shaw 


Can!  Tools  Hardware 


One  of  the  first  forays  into  the 
world  of  3G  wireless,  the  Sierra 
Wireless  AirCard  555, a  PC  card  that 
runs  on  Verizon  Wireless’  new  Code 
Division  Multiple  Access  lxRTT  net¬ 
work,  blew  us  away. The  two  — 
card  and  network  —  working  in 
tandem  delivered  what  was  prom¬ 
ised:  the  joy  of  a  high  speed  wire¬ 
less  connection. 

Best  of  the  Tests  Award  winner:  Sierra  Wireless  AirCard  555 

Company:  Sierra  Wireless,  www.sierrawireless.com 

Date  reviewed:  March  18, 2002,  www.nwfusion.com,  DocFinder:  3028 

Reviewer’s  comment:  Remember  how  you  felt  when  you  graduated  from 
dial-up  to  broadband  for  Internet  access  from  home?  The  pure  joy  of 
cruising  the  internet,  watching  streaming  video  and  downloading 
e-mail  at  speeds  that  made  it  feel  like  you  were  using  your  office's  T-l 
line?  Now  you  can  get  a  similar  feeling  in  the  world  of  wireless. 

—  Keith  Shaw 


See  TESTS,  page  64 


You're  an  IT  professional,  not  a  software  clean-up  crew. 

Implementing  Web  filtering  software  doesn't  have  to  be  an  administrative  mess.  With  Websense  Enterprise,  you  get  a  proven  solution  tested 
and  trusted  by  more  than  half  the  Fortune  500.  We've  partnered  with  the  leading  Internet  infrastructure  providers  for  easy  installation  and 
integration  into  existing  firewalls,  cache  appliances  or  proxy  servers.  Automated  updates  and  reporting  make  daily  administration  a  breeze.  And 
Websense  guarantees  a  leak-free  database  that  sets  the  industry  standard.  Try  it  now  and  forget  about  ever  getting  your  hands  dirty. 


Stop  by  www.websense.com  today  for  your  free,  fully  functional  30-day  trial. 


EMPLOYEE  INTERNET  MANAGEMENT 

NASDAQ:  WBSN 


WEBSENSE  INTEGRATES  WITH  LEADING  INFRASTRUCTURE  SOLUTIONS  SUCH  AS: 


Cisco  Systems 

Verified 


n  Check  Point- 

H  Software  Technologies  Ltd . 
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Inktomi" 


Microsoft 


NetworkAppliance" 
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TESTS,  Continued  from  page  62 

Enterprise  servers 

IBM  picks  up  the 
win  in  this  category 
because  it  was  think¬ 
ing  outside  the  box 
when  it  built  its  new 
xSeries  x440  server. 
This  server  has  eight  processors  sitting  in  a  4U  (7  inch¬ 
es)  rack-mountable  chassis  that  can  be  linked  with  a  sis¬ 
ter  box  to  create  a  16-processor  server. This  ability  to 
scale  processors  outside  the  chassis  is  a  novel  approach 
to  increasing  server  horse  power  that  yielded  outstand¬ 
ing  performance  numbers  in  our  tests. 

Best  of  the  Tests  Award  winner:  IBM  xSeries  x440 
Company:  IBM,  www.pc.ibm.com 
Date  reviewed:  Oct.  7, 2002,  www.nwfusion,  DocFinder:  3029 
Score:  4.7 

Reviewer’s  comment:  The  x440  is  an  impressive  package  of 
computing  performance,  scalability,  availability  and  man¬ 
ageability.  It  should  work  well  in  large  corporate  environ¬ 
ments  where  performance  and  future  protection  is  impor¬ 
tant.  If  you  are  considering  sewer  consolidation,  this  could 
be  the  sewer  for  you.  IBM  has  taken  sewer  scalability  and 
processor  density  to  a  new  level  with  the  ability  to  run 
eight  processors  in  a4U  (7  inches)  rack-mountable  chas¬ 
sis  and  then  connect  two  chassis  together  to  create  a  16- 
processor  sewer  —  John  Bass,  Centennial  Networking  Labs 

Enterprise 
suiitch/r outers 

Cisco’s  Catalyst 
3550-24,  which  ships 
with  24-port  Fast 
Ethernet  and  two- 
port  Gigabit  Ethernet 
capacity,  tops  our  list  of  switches  tested  this  year 
because  of  its  near-perfect  performance  in  our  tests. 
The  box  produced  wire-speed  throughput  even  while 
handling  access  control  lists  we  intentionally  applied 
to  try  to  slow  it  down.  Basic  Layer  3  performance  was 
picture-perfect  with  wire-speed  throughput  throughout 
our  suite  of  tests  and  only  a  120-microsec  latency 
measurement  with  64-byte  packets. 

Best  of  the  Tests  Award  winner:  Catalyst  3550-24 

Company:  Cisco,  www.cisco.com 

Date  reviewed:  March  25, 2002,  www.nwfusion.com,  DocFinder: 
3030 

Score:  4.4 

Reviewer’s  comment:  Cisco  designed  its  new  midrange 
Catalyst  3550-24  switch  to  connect  access  devices  to 
the  core  of  large  and  midsize  enterprise  networks,  and 
from  what  we  found  with  our  performance  testing,  it  is 
well  equipped  for  the  task.  —  John  Bass,  Centennial 
Networking  Labs 


HP  dial-up  services 

With  many  dial¬ 
og  AT&T  up  ISPs  going 

W  o  r  I  d  net  un<^er  *n  the  past 

year,  it  is  good  to 


Best 
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see  the  continued  excellence  of  AT&T’s  WorldNet  ser¬ 
vice  in  our  performance  rankings.  While  the  scores 
weren’t  as  powerful  as  last  year  (some  ISPs  are  catch¬ 
ing  AT&T),  the  service  still  ranks  as  the  best  in  terms  of 
speedy  connections  (quick  times  to  log  on  and  high 
initial  connect  speeds), and  low  call-failure  rates 
(fewer  busy  signals). 

Best  of  the  Tests  Award  winner:  AT&T  WorldNet 
service 

Company:  AT&T,  www.business.att.com 

Date  reviewed:  Monthly  online,  www.nwfusion.com,  DocFinder: 
3031 

Reviewer’s  comment:  Despite  turmoil  in  the  ISP  market, 
AT&T  WorldNet  still  outshines  others  in  terms  of  perfor¬ 
mance  in  the  national  ISP  space.  —  Keith  Shaw 


multimedia 

natmarhing 

We  awarded  Viv- 
idon’s  Streaming  De¬ 
livery  Accelerator 
and  its  correspond¬ 
ing  management 
software  top  honors 
in  this  category  for 
its  high  perfor¬ 
mance  and  —  by  virtue  of  a  Web-based  management 
system  —  high  manageability  and  functionality  And 
considering  its  size  and  resources,  we  also  give  kudos 
to  Vividon  for  exhibiting  outstanding  pre-  and  post¬ 
sales  services  in  customer  facilities. 

Best  of  the  Tests  Award  winner:  Streaming  Delivery 
Accelerator 

Company:  Vividon,  www.vividon.com 

Date  reviewed:  Dec.  10, 2001,  ww.nwfusion.com,  DocFinder:  3032 

Score:  4.5 

Reviewer’s  Comment:  If  you 've  been  banging  your  head 
looking  for  a  streaming  media  investment,  the  Vwidon 
solution  is  a  steal.  —  Christine  Perey,  Perey  Research  & 
Consulting 


tletmurh  manage¬ 
ment  hardmare 

A  crucial  tool  in  your  “little 
black  bag”  to  have  when  your 
network  gets  sick  should  be  a 
handheld  network  analyzer. 
These  devices  can  reveal  cable 
faults,  detect  chattering  network 
adapters,  identify  switch  mal¬ 
functions  and  diagnose  the 
nature  of  a  router  malady  Our 
winner,  Fluke  Networks’ 

NetTool,  offers  essential  cabling 
and  network  health  tests  for  an 
excellent  price  and  value. 

Best  of  the  Tests  Award  winner:  NetTool 

Company:  Fluke  Networks,  www.flukenetworks.com 

Date  reviewed:  July  1, 2002,  www.nwfusion.com,  DocFinder: 
3033 


Score:  4.8 

Reviewer’s  comment:  Fluke’s  NetTool  accurately  pin¬ 
pointed  cabling  and  network  faults  with  aplomb,  and 
without  a  fancy  color  display  or  extra  bells  and 
whistles.  —  Barry  Nance,  independent  consultant 

tletmurh  manage¬ 
ment  su Ft  mare 


In  our  recent  test  of  net¬ 
work  management  sys¬ 
tems/frameworks,  we  found 
that  four  products  we  tested 
were  mature,  well-crafted 
and  thoughtfully  designed 
products.  But  with  its  wealth 
of  features,  useful  reports 
and  consistent  user  inter- 
face,  Hewlett-Packard’s 

OpenView  edged  out  the  others  in  our  tests.  While 
frameworks  have  gotten  a  bad  rap,  we’ve  found  that 
the  vendors  have  improved  their  products  signifi¬ 
cantly  and  might  be  worth  another  look. 

Best  of  the  Tests  Award  winner:  HP  OpenView 


Company:  Hewlett-Packard,  www.openview.hp.com 

Date  reviewed:  Oct.  21, 2002,  www.nwfusion.com,  DocFinder: 
3046 


Score:  4.8 


Reviewer’s  comment:  OpenView  excels  at  managing 
diverse  devices  through  a  consistent  interface,  monitor¬ 
ing  network  resources  and  reporting  network  activi¬ 
ties.  Open  View  scales  well,  runs  on  several  different 
platforms  and  makes  network  administration  a  much 
easier  job.  —  Barry  Nance,  independent  consultant 


RemntB-nFFicu 
natmarhing  gear 

The  GigaFast 
EZ500-S  touts  an 
innovative,  fan¬ 
less  (hence 

noiseless)  design,  good  price,  performance  and  ease 
of  use.  While  it  only  has  one  gigabit  port,  that  makes  it 
a  good  choice  for  small  offices/home  offices  that 
need  a  boost  but  don’t  want  to  pay  a  ton  for  pure 
gigabit  throughput. This  product  really  gives  this  very 
focused  target  market  what  it  needs. 

Best  of  the  Tests  Award  winner:  GigaFast  EZ500-S 

Company:  GigaFast,  www.gigafast.com 

Date  reviewed:  Feb.  11, 2002,  www.nwfusion.com,  DocFinder: 
3034 

Score:  4.8 

Reviewer’s  comment:  We  assumed  there  wasn 't  anything 
new  to  report  in  the  world  of  1 0/ 1 00M  bit /sec 
switches.  However,  GigaFast  EZ500-S  proved  us  wrong. 

—  Mike  Avery,  contributing  Network  World  reviews  editor 


See  TESTS,  page  66 
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Finally  -  the  missing  piece! 


Today’s  ever-growing  data  centers  make  it  harder 
than  ever  to  get  hands-on  control  of  all  your  servers 
and  network  devices.  Now  you  can  have  direct 
access  to  every  device  in  your  data  center  from  any 
location,  all  from  a  single  screen.  Manage  and  maintain 
servers  in  your  local  rack  or  across  the  world. 


Total  system  control  over  analog  or  IP  connection 
means  complete  ‘at  the  computer’  troubleshooting 
from  anywhere. 

Now  it’s  all  falling  into  place.  Avocent's  advanced 
analog  and  digital  KVM  solutions  -  the  perfect  fit 
for  the  server  room  and  enterprise. 


For  the  complete  picture,  download  a  free  KVM  Tech  Guide  today  at 
www.kvmguide.com  or  call  1  -866-AVOCENT  (286-2368),  ext.  3005. 


Avocent,  the  Avocent  logo.  “The  Power  of  Being  There",  “KVM  over  IP",  DSR,  DSView,  DS1800,  and  CPS  are  trademarks  of 
Avocent  Corporation.  All  other  marks  are  the  property  of  their  respective  owners.  Copyright  Q  2002  Avocent  Corporation. 
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TESTS,  Continued  from  page  64 

Security 

infrastructure 

Our  recent 
review  of 
remote 
access  VPN 
offerings 
shows  that 
Cisco  clearly 
built  the  VPN  3000  series  Concentrator  and  the 
Cisco  VPN  3002  hardware  client  with  an  enter¬ 
prise  deployment  in  mind,  giving  it  the  edge 
over  competitor  Check  Point  Software  to  win 
this  category  The  VPN  product  combination 
affords  network  professionals  excellent  client- 
management  features,  strong  policy  setting 
and  policy  maintenance  tools,  a  built-in  client- 
side  firewall  and  solid  reporting. 

Best  of  the  Tests  Award  winner:  Cisco  VPN  3000 
Series  Concentrator  and  Cisco 
VPN  3002  Hardware  Client 

Company:  Cisco,  www.cisco.com 

Date  reviewed:  Oct.  28, 2002,  www.nwfusion.com, 
DocFinder:  3047 

Score:  4.7 

Reviewer’s  comment:  Cisco  clearly  considered  the 
issues  of  enterprise  remote  access  and  built 
excellent  products  that  are  easy  to  use,  deploy 
and  update,  but  are  not  arbitrarily  limiting  in 
terms  of  policy,  platform  or  features.  —  Joel 
Snyder,  Opus  One 

Security  touts 


EEye  Digital 
Security’s  net¬ 
work  vulnerabil¬ 
ity  scanning 
tool,  Retina, 
bests  this  cate¬ 
gory  because  of 
its  speed  and 
accuracy  in  pin¬ 
pointing  securi¬ 
ty  holes  in  an 
enterprise  network  and  for  its  intuitive  man¬ 
agement  interface  and  its  ability  to  fix  some 
vulnerabilities  when  they  are  pinpointed. 

Best  of  the  Tests  Award  winner:  Retina  4.7 

Company:  eEye  Digital  Security,  www.eeye.com 

Date  reviewed:  Feb.  4, 2002,  www.nwfusion.com, 
DocFinder:  3035 

Score:  4.3 

Reviewer’s  comment:  Retina  is  lightning  fast,  scan¬ 
ning  our  12-system  test  network  in  less  than  5 
minutes.  —  Mandy  Andress,  ArcSec 


VoIP 

Alcatel 


e-ND’s  4980 
IP-based  soft 
phone  was 
clearly  a  cut 
above  the 
other  products 
tested  in  this 
category.  This 
product  sup¬ 
ports  more 
than  90%  of 
the  traditional  corporate  telephone  features, 
and  it  topped  the 

ticket  in  terms  of  installation,  ease  of  use  and 
configuration. 

Best  of  the  Tests  Award  winner:  e-ND  4980 


Company:  Alcatel,  www.alcatel.com 

Date  reviewed:  Feb.  25, 2002,  www.nwfusion.com, 
DocFinder:  3036 

Score:  4.65 

Reviewer’s  comment:  In  the  features  realm,  this 
product  supports  37  of  the  41  features  we 
deemed  necessary  for  use  in  a  corporate 
setting.  —  Miercom 


Wireless 


In  a  year  that  has  seen  802.1  lb  take  off  in 
corporations  under  intense  security  pressure, 
we  are  happy  to  honor  the  Bluesocket  WG- 
1000  wireless  gateway  in  this  category  We 
found  it  successfully  protects  your  wireless 
resources. 


Best  of  the  Tests  Award  winner: 

WG-1000  wireless  gateway 

Company:  Bluesocket,  www.bluesocket.com 

Date  reviewed:  April  8, 2002  www.nwfusion.com, 
DocFinder:  3037 


Score:  4.1 


Reviewer’s  comment:  The  WG-1000  is  an  agnostic 
way  to  contain  and  manage  wireless  LAN  users 
while  leveraging  internal  authentication  mecha¬ 
nisms  and  VPN  elements  provided.  —  Tom 

Henderson,  ExtremeLabs 


Testing 

luinninq 

products a 


Network  World  regularly  recognizes  outstanding  products  that 
have  gone  through  our  testing  procedures.  We  honor  these 
products  via  two  awards  —  the  Blue  Ribbon  Award,  for  prod¬ 
ucts  that  have  scored  the  highest  rating  between  a  3.5  and  4.4 
in  comparative  reviews;  and  the  World  Class  Award,  for  those 
products  that  have  scored  a  4.5  or  greater  in  a  comparative  or 
stand-alone  review.  The  following  products  have  earned  these 
awards  in  the  past  year. 

Blue  Ribbon  winners 

Here's  a  look  at  the  eight  products  that 
have  earned  Network  World’s  Blue  Ribbon 
designation  for  earning  the  highest  grade 
between  a  3.5  and  4.4  in  comparative 
DIDDflll  reviews  with  products  in  the  past  12 
nlDDUIl  months.  The  reviews  are  online  at 

www.nwfusion.com,  DocFinder:  3048. 

Brocade  Communications’  SilkWorm 
12000 


nffir 


Cisco’s  Aironet  and  ACS 

Compuware’s  EcoPredictor  3.2 

EEye  Digital  Security’s  Retina 

Efficient  Networks’  5930  Business  Gateway 

Netgear’s  FR314 

Phonex  Broadband’s  NeverWire  14 
Reality  Fusion’s  SeeSaw  Distance  Meetings 

Blur  Id  Class  R wards  designees 

Here's  a  look  at  the  14  products  that 
have  earned  Network  World’s  World  Class 
Award  for  a  score  of  4.5  or  greater  in 
either  a  comparative  or  stand-alone 
review  in  the  past  12  months. The  reviews 
are  online  at  www.nwfusion.com, 
DocFinder:  3049. 

Alcatel’s  e-ND  4980 
Ateonix  Networks’  NASAS-2040  NAS  server 


(Ubi/ter 


Blue  Coat’s  Security  Gateway 

Check  Point’s  FireWall-1  NG  on  Nokia  IP350,  Nokia 
Internet  security  appliance,  SecureClient 

Cisco’s  Cisco  VPN  3000  Series  Concentrator  and  Cisco 
VPN  3002  Hardware  Client 

Dantz’s  Retrospect  Server  Edition 
Fluke  Networks’  NetTool  Connectivity  Tester 
GigaFast’s  EZ500-S 
Hewlett-Packard’s  OpenView 

Linksys’  EG0801  SK  Instant  Gigabit  Etherfast  10/100/1000 
Workgroup  Starter  Kit  8 

Lucent’s  VitalSuite 


RouteScience  Technologies’  PathControl 
Vividon’s  Streaming  Delivery  Accelerator 
WireOne’s  Glowpoint 
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HOW  DO  YOU  IMPROVE  YOUR 
E-BUSINESS  EFFECTIVENESS? 


When  you  test  Web  performance,  what  you  really  want  to  know 
is  how  the  Web  is  affecting  your  bottom  line.That's  where 
Keynote  Systems  can  help. 

At  Keynote,  we  know  something  about  performance. We  have  been 
benchmarking  the  world's  leading  Web  sites  for  nearly  a  decade. 
All  that  expertise  goes  into  Keynote's  performance  testing  services 
to  help  you  measure  the  effectiveness  of  your  e-business. 

Keynote  offers  services  to  help  you  test  every  aspect  of  your 
e-business,  including  scalability,  capacity,  user  experience,  and 
content  integrity.  Our  performance  testing  services  give  you  a 
360-degree  perspective  of  your  e-business  effectiveness. 

It's  the  least  you  can  expect  from 
the  Internet  Performance  Authority®. 

To  find  out  how  Keynote  testing  services  can  improve 
performance,  save  you  money,  and  increase  your  e-business 
effectiveness,  call  1-800-KEYNOTE  (800-539-6683), 
or  go  to  www.keynote.com/nww 


IMPROVING  THE  QUALITY  OF  E-BUSINESS  WORLDWIDE. 


©  2002  Keynote  Systems.  Inc.  Keynote  and  the  Keynote  logo  are  registered  trademarks  of  Keynote  Systems,  Inc.  All  rights  reserved. 
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PestPatrol,  www.pestpatrol.com 
By  Winn  Schwartau,  On  Security  columnist 


nn  EXTEnmmarnn  run  peshu 
cnmnuTEtt  bugs 


The  late  Grace  Hopper,  mother  of  mod¬ 
ern  computing,  once  remarked  that  when 
her  12-ton,  room-sized  tube  computer 
operated  erratically,  it  was  because  of  a 
bug.  Literally  A  moth.  And  a  half  century 
later,  no  matter  what  we  do,  our  comput¬ 
ers  are  still  “buggy” 

But  today,  the  worst  bugs  are  the  offen¬ 
sive,  destructive  and  privacy-violating 
bugs;  bugs  on  the  attack  that  maliciously 
target  computers  and  the  operators 
behind  the  keyboard. They  are  those  pesty 
and  pesky  Trojan  horses,  spyware,  talkative 
cookies,  hostile  code  and  hacker  tools 
that  break  past  firewalls,  intrusion-detec¬ 
tion  systems,  antivirus  software, VPNs,  pass¬ 
word  protection  tools  and  almost  any 
other  technical  security  measure  you 


might  implement. 

My  choice  for  security  product  of  the 
year  solves  these  problems  and  one  other 
significant  one:  the  insider  threat.  Statistics 
show  more  than  80%  of  investigated  com¬ 
puter  crimes  involve  current  or  former 
“trusted”  insiders  who  had  or  have  net¬ 
work  access.  But  little  attention  has  been 
focused  on  how  to  deal  with  this  obvious 
and  well-documented  (albeit,  perhaps 
politically  incorrect)  threat. 

PestPatrol’s  PestPatrol  is  unique  security 
software  that  detects  and  eradicates  nearly 
60,000  known  “pest-ridden”  (non-viral) 
software  bugs,  coming  from  more  than 
1 1,000  distinct  families  (as  of  September 
2002).  Have  you  thought  about  the  gar¬ 
bage  that  might  be  rummaging  around 


your  offices  desktop  computers  now,  not 
only  violating  privacy  but  also  perhaps 
broadcasting  corporate  information  to 
distant  listening  posts? 

Do  you  know  which  employee  is  running 
steganographic  software  so  he  can  send 
secret  encrypted  messages?  Who’s  using 
hacker  tools?  Who’s  trying  to  download 
hostile  code  from  the  ’Net?  Do  you  know 
or  can  you  currently  control  the  myriad 
cookies  that  broadcast  yourcompanycom 
information  to  the  Internet  when  your 
users  log  on?  And  what  about  that  inde¬ 
cent  invasion  of  privacy  caused  by 
unwanted  spyware?  The  lists  go  on  and  on, 
and  all  you  need  do  is  ask  one  simple 
question:“Do  you  want  to  keep  malicious 
code  off  of  your  computers  or  not?” 

If  you  want  your  desktops  free  from  the 
stench  of  hacker  tools,  password  crackers, 
keystroke  loggers,  port  scanners  and 
more,  then  PestPatrol  is  for  you. 

Consider  remote  administration  tools 
(RAT), such  as  Back  Orifice, SubSeven  or 
NetBus.These  Trojans  communicate  from 
the  desktop  to  a  distant  server  —  gener¬ 
ally  without  permission. They  are  a  huge 
security  breach,  along  with  thousands  of 


other  applets  and  attack  code.  PestPatrol 
is  designed  to  keep  updating  itself  with 
the  latest  file  detections  for  RATs  and 
other  pests,  and  to  look  through  memory 
and  media  to  find  the  executables,  help 
and  associated  files  that  need  eradicating. 

When  I  loaded  PestPatrol  onto  my 
highly  secure  desktop  computer,  I  was 
astounded  to  find  42  hostile  applets  and 
related  pests  that  snuck  past  two  fire¬ 
walls  and  my  ever-current  antivirus  soft¬ 
ware.  I  have  tight  restrictions  on  ActiveX 
and  Java.no  Visual  Basic  Script  allowed 
—  yet  all  of  these  pests  managed  to  get 
through.  How? 

Pest  designers  do  their  best  to  sneak  in 
subtly  under  your  detection  systems  and 
past  your  defenses.  It’s  their  job. Your  job  is 
to  keep  hostile  software  off  of  user  desk¬ 
tops,  out  of  your  corporation,  maintain 
high  levels  of  privacy,  not  expose  your 
company  to  unnecessary  risks  and  create 
a  secure  working  environment. 

You  can’t  do  that  without  PestPatrol. 

Schwartau  is  president  of  Interpact,  a 
security  awareness  consulting  firm.  He  can 
be  reached  at  winns@gte.net. 
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Novell,  www.novell.com 


By  Dave  Kearns,  Wired  Windows  columnist 


rite  snncnnnnizarinn 
mans  e as u 


When  I  first  previewed  NetWare  6  in  July 
2001, some  of  the  new  functionality  built 
into  the  system  really  struck  me.  In  partic¬ 
ular,  the  new  iFolder  utility  for  file  syn¬ 
chronization  caught  my  eye. 

This  utility  lets  you  create  a  subfolder  of 
your  Windows  desktop's  My  Documents 
folder  and  have  the  files  you  put  in  it  auto¬ 
matically  updated  in  an  encrypted  format 
on  a  NetWare  server  whenever  a  change  is 
made  to  a  file.  Installing  the  iFolder  client 


on  any  other  machine  guarantees  that  all 
the  covered  files  are  synchronized  on  all 
the  desktops  so  configured.  A  Web  browser 
also  can  be  used  to  access  the  iFolder 
server  and  upload  or  download  files 
should  you  be  somewhere  that  you 
shouldn’t,  or  can’t,  install  the  iFolder  client. 

All  this  is  good  —  so  good  that  Novell 
didn’t  take  long  in  figuring  out  that  not 
only  is  iFolder  a  good  NetWare  6  utility 
but  also  it  could  be  a  desirable  applica¬ 


tion  on  its  own  —  and  easily  could  be 
pushed  beyond  the  NetWare  platform. 

So  this  April,  Novell  launched  iFolder 
Professional  Edition  2.0  as  a  stand-alone 
product.  It  has  all  the  features  of  the 
NetWare  utility  but  adds  new  functionality 
and  support  for  additional  platforms.  It 
supports  NetWare  6  and  NetWare  5.1  SP3, 
Windows  NT4  SP6a  and  Windows  2000 
SP2,RedHat  Linux  7. 1/7.2  and  Solaris  8 
operating  systems.  It  requires  the  Apache 
Web  server  for  NetWare,  Linux  and  Solaris 
and  Microsoft’s  Internet  Information 
Server  for  Windows.  While  this  first 
release  requires  Novell’s  eDirectory,  future 
versions  are  supposed  to  work  with  any 
certified  Lightweight  Directory  Access 
Protocol-based  directory  system. 

The  product  is  ideal  for  users  who  fre¬ 
quently  move  among  two  or  more  client 
PC  environments  —  even  for  people  who 
like  to  work  from  home  occasionally. The 
iFolder  client  sets  up  quickly  and  easily 


(you  can  let  users  download  it  from  your 
corporate  Web  site),  and  the  ability  to 
access  the  iFolder  files  from  any  Web 
browser  means  that  no  one  ever  needs  to 
be  without  a  critical  file  so  long  as  they 
have  Internet  access! 

I  use  iFolder  more  than  any  other  new 
NetWare  feature.  And  if  I  had  a  mobile 
workforce,  I’d  want  all  my  employees  to 
use  it.  It  takes  less  than  5  minutes  to  set  up 
the  client,  then  no  time  at  all  for  users  to 
maintain  it.  Files  are  synchronized  auto¬ 
matically  whenever  they  change. 

We  often  talk  about  no-brainers,  but 
iFolder  Professional  truly  requires  no 
thought  at  all  to  use  —  and  use  effectively 
It  just  works.  What  more  can  we  ask? 

Kearns  is  a  writer  and  consultant  in 
Silicon  Valley.  He  can  be  reached  at 
info@oquill.com. 

See  WARES,  page  70 


Don’t  make  me  come  over  there. 


Remotely  migrate  your  users  to  XP  or  2000  without  making  a  scene. 


That’s  right,  you’re  not  a  bellhop,  or  an  IT  concierge  for  that  matter.  With  the  robust  Client 
Mgmt  Suite  from  Altiris,  you’re  a  behind-the-scenes  architect  that  can  remotely  migrate 
an  entire  enterprise  to  XP  or  2000  in  no  time  at  all.  Altiris  even  gives  you  comprehensive 
lifecycle  management  for  all  your  networked  devices,  from  deployment  to  retirement. 

All  of  which  saves  you  from  end-user  visits  and  mindless  lo-tech  chitchat.  So  download  our 
free  Migration  Assessment  Toolkit  today,  before  you  swear  this  is  the  last  time — again. 


altiris’ 

intuitive  >  manageability 


Get  a  free  Migration  Assessment  Toolkit  today  at  www.altiris.com/easymigrate92  and  avoid  the  hassle. 


©  2002  Altins.  All  rights  reserved.  All  other  products  mentioned  are  property  of  their  respective  owners. 
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)S,  www.netqos.com 


By  Johna  Till  Johnson,  Eye  on  the  Carriers  columnist 

mEaSURtRG  THE  TRUE  USER  EXPERtEREE 


Network  executives  are  all  too  familiar 
with  the  battles  between  application 
and  infrastructure  groups  over  slow 
application  response  times.  Application 
developers  blame  the  overloaded  net¬ 
work,  and  network  managers  blame 
poorly  designed  applications. 

Users  care  only  about  glacial  respon- 
siveness.Time  spent  waiting  for  an  appli¬ 
cation  to  react  translates  into  lower  pro¬ 
ductivity  and,  often,  into  reduced  rev¬ 
enue  —  exactly  what  most  businesses  in 
todays  economy  can’t  afford. 

A  new  class  of  products  that  provides 
what  I  call“quality  of  experience”  (QoE) 
measurement  is  emerging. These  tools  let 
IT  executives  quickly  and  effectively 
diagnose  performance  problems  on  net¬ 
worked  applications,  pinpointing  the 
cause  of  application  delay.  More  impor¬ 


tantly,  with  the  help  of  these  tools  IT 
executives  can  implement  fast,  perma¬ 
nent  fixes. 

SuperAgent  2.0  from  NetQoS  is  an  out¬ 
standing  example  of  a  sleek,  well- 
designed,  elegant  QoE  monitor. The  Super- 
Agent  appliance  connects  to  a  mirrored 
switch  port  or  network  tap  near  the  serv¬ 
er  farm  and  examines  TCP  header  infor¬ 
mation  to  measure  application  response 
time.  It  breaks  down  response  times  into 
several  components: 

•  Connection  time,  the  time  it  takes  to 
establish  a  TCP  session  between  the  client 
and  server,  which  helps  determine  if  there 
are  performance  problems  overall. 

•  Server  response  time,  the  time  elapsed 
between  initial  client  request  and  a 
response  from  the  server,  which  helps 
uncover  server  performance  problems. 


•  Data  transfer  time,  the  time  between 
the  server’s  first  and  final  data  responses, 
which  can  indicate  problems  with  the 
server  or  the  network. 

•  Data  retransmission  time,  which 
tracks  the  delay  introduced  by  retrans¬ 
mitting  data  over  the  network. 

•  Network  round-trip  time,  the  time  it 
takes  a  packet  to  traverse  the  network, 
which  helps  uncover  network  perfor¬ 
mance  problems. 

SuperAgent  is  a  passive  monitor,  mean¬ 
ing  it  doesn’t  increase  network  load  (a 
great  feature  in  a  performance  tool).  It 
also  tracks  responses  interactively,  mean¬ 
ing  it  checks  performance  multiple  times 
during  one  TCP  session.  Other  tools,  in 
contrast,  measure  response  time  once,  at 
the  start  of  the  session. The  problem  with 
that  approach  is  it  doesn’t  account  for 


changes  as  time  goes  on;  performance 
could  degrade,  and  the  tools  wouldn’t 
know  why. 

SuperAgent  stores  its  results  in  a  SQL 
database  that  can  be  accessed  via  a 
Web-based  interface.  It  also  will  deliver 
reports  and  alarms  via  e-mail  or  popu¬ 
late  an  existing  management  system. 
Using  NetQoS’  Reporter-Analyzer,  you  can 
combine  this  information  with  informa¬ 
tion  from  outside  sources, such  as  Cisco 
NetFlow,  NetScout  probes  and  NetlQ 
response-time  agents. 

When  Network  World  tested  this  product 
earlier  this  year,  it  proved  easy  to  install 
and  highly  accurate,  and  it  delivered  as 
promised  on  all  points  (www.nwfusion. 
com,  DocFinder:  3026).  I  can’t  improve  on 
tester  Bob  Currier’s  final  words, “Super- 
Agent  2.0’s  combination  of  functionality, 
reliability  and  superb  reports  make  it  a 
definite  ‘must  have.’” 

Johnson  is  president  and  chief  research 
officer  at  Nemertes  Research ,  which  pro 
aides  quantitative  research  on  the  busi¬ 
ness  impact  of  technology.  She  can  be 
reached  at  johna@nemertes.com. 


The~Piem:  iHnTeSemn 

Sunbelt  Software,  www.sunbeltsoftware.com 
By  James  Kobielus,  Above  the  Cloud  columnist 


SHtEEatnG  E-mat e  ruom  spam  BEaS  TERS 


Spam  is  the  cosmic  background  radia¬ 
tion  from  the  Internet’s  rapid  expansion 
into  our  everyday  lives.  Spam  is  every¬ 
where,  coming  from  seemingly  every 
direction.  But  that  doesn’t  mean  that  I 
have  to  accept  it  or  that  I  have  to  subject 
my  e-mail  system  to  a  continuous,  corro¬ 
sive  stream  of  incoming  junk. 

Spam  threatens  to  debase  e-mail  as  a 
communication  medium,  just  as  junk  post¬ 
ings  slowly  rendered  many  Usenet  groups 
uninhabitable.  I  like  Sunbelt  Softwares 
innovative  iHateSpam  client  software 
because  it  lets  me  totally  shield  my  e-mail 
in-box  from  spam.  At  the  same  time,  the 
product  lets  me  inspect  every  message  that 
comes  my  way,  just  to  make  sure  it  didn’t 
block  or  discard  any  important  e-mail. 

IHateSpam  is  certainly  not  the  only  client- 
based  antispam  tool  on  the  market,  but  it  is 
the  only  client-based  product  I’ve  come 
across  that  builds “whitelists” by  scanning 
your  Microsoft  Outlook  e-mail  address 
book  and  your  Outlook  client-side  mes¬ 
sage  folders.  IHateSpam  also  is  the  only 
client-side  antispam  tool  that  quarantines 
any  incoming  mail  that  doesn’t  come  from 
a  wl'.itelisted  sender. Whitelist-based  anti- 
spam  filtering  is  the  only  effective  way  to 


ensure  a  continuously  spam-free  in-box. 
Another  plus  is  that  iHateSpam  lets  users 
dynamically  adjust  the  client-side  rules  to 
ensure  the  tool  doesn’t  mistakenly  filter  out 
legitimate  bulk  e-mails  —  such  as  emailed 
newsletters  —  that  they  regularly  receive. 

The  product’s  name  is  none  too  delicate, 
but  it  succinctly  expresses  the  user’s  prim¬ 
ary  motivation  for  seeking  it  out.  IHate 
Spam  comes  in  separate  versions  for 
Outlook  and  Outlook  Express,  both  down¬ 
loadable  from  Sunbelt’s  Web  site. The  prod¬ 
uct  installs  quickly  and  easily  and  setup  is 
straightforward. 

Upon  setup,  the  software  creates  a 
whitelist  of  accepted  e-mail  senders  — 
also  known  as  a  “friends  list” —  by  retriev¬ 
ing  addresses  from  users’ e-mail  address 
books  and  by  scanning  existing  client-side 
mail  folders  for  the  addresses  of  senders  of 
stored  e-mail.  IHateSpam  prompts  the  user 
to  define  an  acceptable  spam-filtering 
threshold,  ranging  from  the  stringent  “all 
spam”  (which  also  might  quarantine  non¬ 
spam  such  as  online  newsletters  to  which 
the  user  has  subscribed)  to  the  more  per¬ 
missive  “some  spam”  (which  will  only 
catch  junk  mail  with  easily  identifiable 
spam  indicators).  Users  can  define  a  per¬ 


sonal  “enemies  list”  of  addresses  from 
which  incoming  e-mail  is  always  blocked, 
and  more  finegrained  personal  filtering 
rules  keyed  to  contents  of  message  head¬ 
ers, subjects,  bodies  and  attachments. 

One  of  the  most  powerful  and  dynamic 
features  of  iHateSpam  is  the  client  soft¬ 
ware’s  participation  in  a  peer-to-peer  online 
“Learning  Network”  hosted  by  Sunbelt 
(similar  to  rival  peer-to-peer  antispam  com¬ 
munities  such  as  Cloudmarks  SpamNet). 
Users  can  designate  any  message  in  an  in¬ 
box  or  a  quarantine  mail  folder  as  “is 
spam”  or  “not  spam”  by  clicking  on  buttons 
embedded  in  the  mail  client.  When  a  user 
designates  a  particular  message  as  spam, 
the  iHateSpam  client  software  sends  a  pat¬ 
tern  of  that  message  to  an  automated  rules- 
creation  engine  in  the  Learning  Network. 
The  engine  tabulates  “votes”  from  all 
deployed  iHateSpam  clients,  ranks  mes¬ 
sages  by  the  probability  of  their  being 
spam,  and  automatically  creates  new  spam 
patterns  and  filtering  rules. The  engine  reg¬ 
ularly  distributes  updated  spam  patterns 
and  filtering  rules  to  all  iHateSpam  clients. 
As  a  final  check, Sunbelt  personnel  review 
all  patterns  and  rules  before  their  distribu¬ 
tion,  just  to  make  sure  they’re  accurate  and 


that  user  cliques  aren't  unfairly  ganging  up 
on  legitimate  commercial  expressions 
(such  as  a  competitor’s  e-mail-based  direct- 
marketing  pitches). 

A  big  caveat  for  iHateSpam  is  —  and  for 
any  antispam  solution  —  that  it  relies  on 
client-based  rules-filtering.The  product 
consumes  CPU  cycles  on  client  machines, 
and  briefly  freezes  the  mail  client  while 
scanning,  filtering  and  handling  incoming 
mail. This  computational  load  can  be  a  sig¬ 
nificant  burden  on  low-end  workstations 
and  can  prove  disruptive  for  users  who 
receive  a  lot  of  e-mail,  especially  as  the  set 
of  spam  patterns  and  filtering  rules  grows. 
Ideally,  much  of  the  filtering  should  be 
done  on  a  centralized  basis  by  mail  gate¬ 
ways  hosted  internally  by  an  enterprise 
customer  or  externally  by  Sunbelt. 
However,  the  vendor  has  not  decided 
whether  to  evolve  iHateSpam  in  that  direc¬ 
tion.  Clearly,  the  product  will  hit  a  scalabil¬ 
ity  wall  soon,  might  not  be  appropriate  for 
broad  corporate  adoption  and  can’t 
address  spam-based  distributed  denial-of- 
service  threats  if  it  doesn’t  centralize  some 
CPU-intensive  mail-filtering  processes. 

Nevertheless,  Sunbelt’s  iHateSpam 
delivers  clear  value  where  it  counts:  by 
enabling  users  to  keep  spam  from  con¬ 
stantly  interrupting  their  lives  and  clutter¬ 
ing  up  their  in-boxes. 

Kobielus  is  an  Alexandria,  Va.,  senior 
analyst  with  Burton  Group.  Reach  him  at 
jkobielus@burtongroup.  com. 

See  Wares,  page  74 


BOTTOM  OF  THE  9™ 

4th  AND  GOAL. 

LAST  SHOT  BEFORE  THE  BUZZER. 


IT  ALL  COMES  DOWN  TO  THE  WINNING  PLAY. 


GET  THE  FREE  PLAYBOOK  FOR  E-BUSINESS.  ONLY  FROM  IBM. 

Welcome  to  the  big  leagues-the  major  leagues-in 
the  game  of  e-business.  There’s  more  money  on  the 
line  in  this  game  than  in  any  other.  So  who’s  going  to 
sit  this  one  out?  Not  you,  if  you  want  to  increase 
margins,  improve  customer  service  and  squeeze 
every  last  cent  out  of  operations.  Not  you,  if  you  want 
to  build  relationships  between 
customers  and  employees, 
your  vendors  and  suppliers. 


Not  you,  if  you  want  to  integrate  department  with 
department,  company  with  company,  subsidiary 
with  subsidiary.  Of  course,  you'll  need  to  start  with 
a  game  plan.  Like  the  Strategy  Play.  The  Solutions 
Play.  The  Integration  Play.  And  the  somebody- 
threw-me-a-curve-what-do-l-do-next  play.  Register 
now  for  the  free  Official  Playbook  for  e-business. 

It  puts  the  CEO,  CIO,  CFO,  CMO 
and  everyone  else  all  on  the 
same  page. 


MAKE  THE  CALL.  GET  THE  BOOK. 


1  800  426-7080  (Ask  for  win)  ibm.com/e-business/playbook15 


(©  business  is  the  game.  Play  to  win . 


IBM,  the  e-business  logo  and  e-business  is  the  game.  Play  to  win  are  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  andtor  other  countries.  ©2002  IBM  Corporation.  All  rights  reserved.  Limit  one  book  per  raspc  -  •  I. 
Respondents  will  be  required  to  complete  a  registration  form  in  order  to  participate  in  this  otter.  Offer  ends  12/31/2002.  Offer  available  only  in  the  U.S.  and  Canada.  Please  allow  2-3  weeks  for  delivery. 


N+1  UPS 

Scalable,  modular  and  manage¬ 
able  with  N+1  capability  for 
unmatched  levels  of  availability. 


PDU  with  System  Bypass 

Rack-optimized  design  with 
configure-to-order,  multi-branch 
whips  to  speed  installation  and 
eliminate  multiple  whips. 


L 


Next  Generation  Enclosure 
Designed  for  the  cabling,  cooling 
and  security  demands  of  today's  IT. 


Integrated  Cable  Routing 

Self-contained  cable 
routing  allows  for  instal¬ 
lation  anywhere  (no 
raised  floor  needed). 


Information  Controller 
Monitor  as  a  complete 
system  through  a  single 
IP  address. 


PowerStruiKure 


Rack-mount  Air  Distribution  Unit 

Delivers  equalized  airflow  from  the 
bottom  to  the  top  of  the  rack  enclosure 
to  help  eliminate  unequal  temperatures 
and  protect  sensitive  electronics. 


Rack-mount  PDU 

Up  to  42  receptacles, 
monitored  to  eliminate 
branch  circuit  overloads. 


Environmental  Monitoring 

Local  or  remote  monitoring  of  tempera¬ 
ture  and  humidity  where  it  counts,  in 
your  enclosures. 


kHP/C0MPAQ  •  SUN  «  IBft/T^ 


GUARANTEED 

COMPATIBILITY 


7  DELL  »  CISCO  «  LUCENT j 


With  "Fits  Like  a  Glove"  money 
back  guarantee!  See  Web  site 
at  right  for  details. 


Planning  a  data  center  is  easy.  __ 
Try  our  online  configurator  today||C" 

or  download  a  FREE  White  Paper:  “Avoiding  Costs  from  Oversizing  Data  Center  lnfrasU#$pi<$£% 


Visit  http://promo.apc.com  Key  Code  h462y  •  Call  888-289-APCC  x2524  •  Fax  401-7^®^ 

©2002  American  Power  Conversion  Corporation.  All  Trademarks  are  the  property  of  their  owners  •  E-mail:  esunwfe^afb^a^S 
132  Fairgrounds  Road,  West  Kingston,  Rl  02892  USA  •  PSX4B2ES-USa 


132  Fairgrounds  Road,  West  Kingston,  Rl  02892  USA  •  PSX4B2ES-USa 
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CffvTTMneiit  Computer  Mew  $  Best 

New  Technology 

Awards  at  FOSE 

• .  Z  O :  O 


Winner  of  the  Windows  and  .Net 
Magazine  "2002  Reader's  Choice  Award 
for  Best  High  Availability  Solution"  and  the 
GCN  "Best  New  Technology  Award"  at 
FOSE,  March  2002. 


Legendary  Reliability™ 
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Pay  as  you  grow 


with  new 
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Manageable.  Modular.  Pre-engineered. 


From  IkWto  5MW,  PowerStruXure  architecture  provides  a  patent-pending, 


integrated  approach  to  building  data  center  infrastructure  utilizing  start® 


dardized,  pre-assembled  components. 


PowerStruXure's  scalable,  modular  design  lets  you  build  out  capacity  onjy 

. 

as  it's  required.  You  can  also  easily  adapt  to  the  ever-changing  requirements 


of  your  server  room  or  data  center,  proactively  manage  the  physical  layer  of 


your  network  infrastructure,  and  increase  your  system  availability  per  dollar. 


Best  of  all,  you  will  never  be  boxed  in  by  proprietary  solutions. 
PowerStruXure  is  vendor-neutral  and  compatible  with  all  major  server  and 
internetworking  platforms,  including  HP/Compaq,  Dell,  IBM,  Sun,  Alcatel, 
Cisco,  Nortel,  Ericsson,  and  Siemens.  Find  out  today  why  experts  and 
users  agree:  you  no  longer  need  to  design  your  data  center  using  an  out¬ 
moded  approach. 


"PowerStruXure's  integration  is  an  example  of 
thoughtful  design,  taking  many  of  the  costly, 
disparate  environmental  systems  in  a  data 
center  and  unifying  them.... " 

Greg  Tally,  Broadband  Editor 
Boardwatch  Magazine 


" ...  I  enjoy  the  fact 
that  I  can  buy  only 
what  I  need  now  and 
add  to  it  later  only 
when  I  need  to. " 

Michael  Touchstone 

Manager  of  Energy 
Conservation, 

Cox  Communications 
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VPn  SERVICE  WITH  a  TWIST 


Virtela  Con',niunications,  www.virtela.com 


B.y  Steve  Taylor,  Packet  Evangelist  columnist 


Truly  unique  ideas  are  rare.  Less  rare,  and 
generally  more  productive,  is  taking  a  cou¬ 
ple  of  old  ideas  and  combining  them  in  a 
unique  fashion. This  latter  type  of  innova¬ 
tion  makes  Virtela  Communications’  Virtela 


Option 


In  today’s 

Network-dependent  business  environment 

WAN  Failure 
is  NOT  an 

even  for  branch  offices  and 
small  to  medium-sized  companies. 


Wm 


In  toda/s  internet-driven  business  world, 
network  downtime  is  NOT  an  option  for 
any  company.  When  a  company's  WAN 
fails,  business  literally  comes  to  a  grinding 
halt.  The  consequences  are  dire 
particularly  for  small  and  medium  sized 
companies,  even  for  branch  offices  of  large 
enterprises.  With  affordable  high  speed 
broadband  access  availability  everywhere, 
WAN  redundancy  is  no  longer  a  luxury 
only  larger  companies  could  afford. 


amplify  net 


Introducing  the  iSurfJanus™  Family  of  Multi-Homed  WAN 
Gateways  from  Amplify.net! 

Enables  you  to  combine  up  to  3  WAN  lines  (T1 ,  Frame  Relay,  DSL,  cable 
and  wireless)  via  high  speed  Ethernet  ports  connected  to  the  same  or 
different  ISPs  to  give  your  network  automatic  WAN  backup,  fail-over  and 
recovery,  secured  with  firewall  and  VPN.  With  its  built-in  dynamic  WAN 
load  balancing,  you  also  get  the  extra  benefit  of  expanded  bandwidth. 

With  Amplify.net's  iSurfJanus,  WAN  redundancy  is  literally  a 
"No  Brainer"  decision  for  you! 

•  "No  Brainer"  Price 

•  "No  Brainer"  Installation 

•  "No  Brainer"  Interoperability 

•  "No  Brainer"  ROI 

Say  goodbye  to  slow  and  expensive  ISDN  or  analog  backup 
today  and  give  your  WAN  the  redundancy  it  deserves! 


Can  you  afford  not  to  call  AmpHfy.net  now? 

Call  510  •  360  •  6071,  e-mail  info@amplifynet.com 
or  visit  www.amplifynet.com/isurfjanus 


VPN  my  choice  as  a  category-breaker. 

Several  givens  are  shaping  the  long-haul 
services  market.  Companies  are  demand¬ 
ing  extremely  reliable  services.  Stability  of 
individual  facilities-based  service  pro¬ 
viders  is  a  primary  concern. The  price  has 
to  be  right.  And  most  of  the  network  traf¬ 
fic  is  evolving  to  —  if  it  isn’t  already  —  IP 

Add  to  this  a  couple  of  industry-related 
factors.  On  the  services  side,  most  facili¬ 
ties-based  carriers  have  vastly  overbuilt 
their  IP  backbones,  and  the  majority  of 
the  Internet  backbone  is,  in  reality,  lightly 
utilized.  Still,  users  are  concerned  about 
the  lack  of  control  and  quality  of  service 
(QoS)  in  the  Internet,  especially  if  their 
traffic  is  primarily  handled  by  one  ISP 

On  the  equipment  side, several  vendors 
now  offer  IP  service  switches  that  provide 
tunnel  management  and  measure  QoS 
across  IP  backbones. These  switches  let 
service  providers  control  a  large  number 
of  secure  tunnels  and  to  impose  a  num¬ 
ber  of  QoS  parameters  across  the  other¬ 
wise  less-than-ideal  IP  backbone. 

Throw  in  the  reality  that  most  service 
providers  have  historically  bought  and 
bartered  bandwidth  from  other  service 
providers  —  the  carriers’  carriers. This  long- 
established,  but  not  widely  publicized, 
practice  lets  carriers  provide  bandwidth  to 
each  other  over  physical  fiber  or  large  ded¬ 
icated  bandwidth  pipes  that  is  subdivided 
and  resold  to  corporations. 

Virtela  has  taken  advantage  of  the  best  of 
each  of  these  factors  to  create  a  next-gen¬ 
eration  VPN  service  that  provides  QoS.  It 
doesn’t  own  its  core  network.  Instead,  it 
buys  otherwise  unused  Internet  bandwidth 
in  bulk  from  facilities-based  carriers. Then 
it  puts  its  own  IP  services  switches  on  the 
edge  of  the  network  so  it  can  add  QoS  and 
secure  tunnel  management  on  the  outside. 

This  multicarrier  approach  brings  three 
fundamental  benefits  (see  story  page  87). 
First,  because  Virtela  is  buying  bandwidth 
without  the  network  infrastructure,  it  can 
offer  the  service  at  an  attractive  price. 
Second,  the  service  switches  let  Virtela 
superimpose  QoS  with  some  strict  service- 
level  guarantees.This  is  possible  because  if 
one  network  is  not  providing  the  desired 
service  level, Virtela  simply  can  switch  the 
traffic  to  a  different  part  of  the  Internet 
backbone. Third,  for  those  concerned 
about  the  future  and  stability  of  individual 
providers,  the  multiprovider  approach  gives 
several  back-up  paths,  insulating  customers 
from  a  single-carrier  network  failure. 

Virtela,  one  of  Network  World’s  2002  10 
start-ups  to  watch  (www.nwfusion.com, 
DocFinder:  3025), offers  a  number  of  en¬ 
hanced  services,  including  turnkey  voice 
and  video,  on  top  of  this  VPN  backbone. 

But  the  company’s  unique  infrastructure 
and  market  approach  really  provide  the 
power  behind  the  service. 


Taylor  is  president  of  Distributed  Network 
Associates  in  Greensboro,  N.  C. ,  and  pub¬ 
lisher  ofWebtorials.com.  He  can  be 
reached  at  taylor@webtorials.com. 
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I  see  England.  I  see  France.  I  see  your  company's  underpadlS 
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Fiberlink  Secure  Broadband:  rr  ■  -  :  nuiers  Fiberlink  Global  Connect:  for  branch  offices 


remote  access  make  you  feel  exposed?  With  Fiberlink,  you're  covered. 

Mobile  executives.  Telecommuters.  Branch  offices.  All  tapping  into  your  network's  mission-critical  applications  and  data. 

How  can  you  be  sure  you  have  the  enterprise-class  security  you  need?  Only  Fiberlink  delivers  a  level  of  integrated  security, 
access  and  management  that  optimizes  remote  access  -  anytime,  anywhere.  The  confidence  of  policy-enabled  remote  access, 
with  integrated  authentication,  intrusion  detection,  VPN,  distributed  firewall  and  virus  protection.  And  robust  tools  that  give 
end-users  easy  access  and  administrators  fewer  headaches.  It's  no  wonder  that  leading  industry  analysts  recommend 
Fiberlink  to  their  clients.  Did  we  also  mention  that  our  customers  typically  reduce  their  costs  by  as  much  as  80%? 

Learn  more  at  or  call  today.  Before  you  catch  something. 
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Picking 

the  winners 

The  User  Excellence  Award,  in  its 
18th  year,  honors  user  organizations 
that  demonstrate  exceptional  use  of 
network  technology  to  further  busi¬ 
ness  objectives.  Network  World  e di- 
tors  select  winners  from  a  pool  of 
entries  submitted  by  user  organiza¬ 
tions  or  vendor  representatives. 

In  evaluating  entries,  we  look  for 
companies  that  have  adapted  main¬ 
stream  technologies  creatively  or 
have  applied  newer  infrastructure 
technologies  to  solve  pressing  busi¬ 
ness  problems.  Winning  projects 
tend  to  create  great  business  cases, 
showing  how  technology  leads  to 
vast  savings,  new  opportunities  or 
demonstrable  productivity  gains. 

Royal  &  SunAlliance  USA  won  the 
2002  award  from  among  more  than 
50  entries  by  accomplishing  the 
unheard-of.  It  enlisted  the  help  of  its 
nearly  7,000  employees  to  perform  a 
massive  PC  upgrade  from  Windows 
95  to  XP,  saving  an  immediate  $1,5 
million  in  contract  labor  costs  while 
closing  security  gaps  that,  until 
fixed,  made  it  ineligible  for  worldwide 
security  ISO  certification.  In  the 
process,  it  kicked  off  an  identity 
management  system,  turned  users 
into  partners  on  software  license 
compliance,  and  discovered  ways  to 
lower  software  costs  and  out¬ 
sourced  help  desk  fees. 

The  U.S.  Department  of  Veterans 
Affairs  and  Wells'  Dairy  are  runners- 
up.  The  VA  deserves  honor  for  an 
enterprise  content  delivery  network 
that  delivers  distance-learning  and 
Vemedicine  applications, while  Wells' 
for  a  convergence  project  that 
s-  ,r  video  (see  page  84). 

Additional  companies  earned 
honorable  mentions.  Their  pro¬ 
files  are  at  at  www.nwfusion. 
com,  DocFinder:  3042. 


Ruuac  g  suRRULtaocE  usn  turns  the  pore 


user  cxceulerce  RtuaRO  ERR  a  mucrtrac 


RETIURRK  PROJECT  THBT  TURREO  ERR  USERi 


iT  RaRTRERS,  UiHRLE  SaVtRG  BtG  RUCKS. 


bo.  mujuel  bummul 


To  fully  appreciate  the  network  project  that  won 
insurance  giant  Royal  &  SunAlliance  USA  the  2002 
User  Excellence  Award,  put  yourself  in  the  shoes  of 
Roger  Thibodeau,  chief  network  executive. Your 
brand  new  CTO,  Chris  Heeleywas  hired  in  May 
2001  to  oversee  strategic  infrastructure  planning. 
Heeley  almost  immediately  must  break  his  sacred 
keep-it-simple  project  management  rule  with  a  $3.2 
million  doozy  for  which  he’s  named  you  project 
manager. You’ve  got  to  upgrade  7,000  Windows  95 
PCs  to  XP  while  your  network  staff  simultaneously 
rolls  out  Active  Directory  as  the  core  of  a  new  iden¬ 
tity  management  system,  switches  to  a  new  soft¬ 
ware  distribution  server  and  implements  self-ser¬ 
vice  password  management,  among  other  tasks. 

Your  first  thought  was  to  get  help  from  the  out¬ 
side.  But  a  cost  estimate  based  on  rates  and  time¬ 
lines  from  your  usual  contractors  tallied  $1.5  mil¬ 
lion  with  a  sometime-in-2003  completion  date  for 
the  operating  system  cutover  alone. You’ve  only  got 
until  December  2002  to  complete  the  project,  from 
planning  through  completion  —  with  a  scant  four 
months  to  upgrade  7,000  PCs. 

You’re  certain  that  the  network  can  be  your  work¬ 
horse.  With  a  little  customization  done  by  your  staff 
on  XP’s  self-installation  feature,  Remote  Install 
Service  (RIS),  the  network  can  push  the  install  pro¬ 
gram  to  the  clients  without  CDs.  (You  shove  from 
your  brain  the  risk  in  choosing  XP  which  at  the 
moment  —  September  2001  —  Microsoft  hasn’t  re 
leased  for  production  yet.You’ve  beta-tested  XRand 
know  you  want  the  operating  system  for  its  remote 
control  and  other  built-in  features.  Plus,  Microsoft  has 
revealed  that  it  will  shortly  cease  supporting  your 
other  option,  Windows  2000.) 

But  who  would  initiate  the  install  on  each  machine 


and  do  the  backup,  restore  and  troubleshooting 
throughout  your  94  offices,  including  the  Charlotte, 
N.C.,  headquarters?  You  and  Heeley  conclude  each 
user  is  the  most  expedient  choice,  although  many 
R&SA  USA  employees  are  not  especially  computer- 
literate.The  process  must  be  so  simple  that  users  can 
upgrade  their  PCs  themselves  with  minimal  over¬ 
sight,  regardless  of  technical  prowess. 

Mission  impossible?  The  network  infrastructure 
team  proved  not.  Not  only  did  R&SA  USAs  team 
conduct  a  massive  self-service  operating  system 
cutover,  but  in  the  process,  it  also  certified  that  the 
company’s  450  applications  would  work  with  XP 
inventoried  IT  resources  and  instituted  a  corpo¬ 
ratewide  software  license  compliance  program. 

Better  still,  the  project  converted  business  man¬ 
agers  and  end  users  into  partners  for  software 
license  compliance  and  application  training. This 
while  making  infrastructure  folks  into  corporate 
stars  as  employees  gained  a  better  understanding 
of  IT  processes. 

And  not  one  person  involved  filed  a  complaint 
against  the  project  to  the  CIO  or  other  senior  man¬ 
agers,  Heeley  says. 

End  users  actually  begged  for  their  turn  at  the 
upgrade, Thibodeau  adds. 

For  its  creativity  in  crafting  an  almost  painless 
operating  system  cut-over  process  that  saved  $1.5 
million  in  contract  labor  fees  while  improving 
security  and  turning  end  users  into  IT  partners, 
R&SA  USA  wins  the  2002  User  Excellence  Award. 


Frnm  liability  tn  asset 

The  plan  was  either  ingenious  or  a  death  trap.“We 

See  ROYAL,  page  80 
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Royal  &  SunAlliance  Windows  XP  migration  project; 
participants  Roger  Thibodeau  (left),  Karen  Martin 
and  Chris  Heeley  couldn't  be  happier  with  the 
results  of  the  self-service  installation  process i  that; 
saved  the  company  an  immediate  $1.5  million. 
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Storage  Knowledge  -  Business  Results 


By  Steve  Kenniston 


One  section  that  is  getting 
more  and  more  attention  on 
Requests  for  Quotes  (RFQs) 
today  is  the  section  that 
deals  with  vendors’  Technical  Support. 
Technical  Support  is  increasing  as  a 
key  buying  criteria  for  storage  end 
users  in  today’s  economy. 


Why? 

1.  The  technical  talent  pool  to 
manage  and  service  network 
storage  is  limited 

2.  Costs  to  have  great  technical 
resources  on  staff  are  prohibitive 

3.  Training  costs  and  ongoing 
proficiency  commitment  is  high 

4.  Networked  storage  interoperability 
is  still  a  nightmare 


So  what  do  IT  professionals  want 
from  their  storage  vendor  when  it 
comes  to  technical  service?  First, 
they  would  like  a  Technical  Services 
portal  that: 

•  Has  a  very  user-friendly,  intuitive 
on-line  knowledge  base  that 
enables  the  IT  administrator  to 
answer  relatively  simple  questions 
quickly  and  easily 

•  Allows  access  to  all  service  cases 
(opened  and  closed)  that  shows 
the  progress  being  made  on  a 
case  without  having  to  call  the 
support  center 

•  Shows,  pro-actively,  known  soft¬ 
ware  issues  so  that  the  IT  adminis¬ 
trator  can  catch  known  problems 
before  they  happen 

•  Has  the  ability  to  transfer  data 
from  applications  and  middleware 
at  the  customer  site  to  vendor  site 
for  analysis 

IT  professionals  also  want  the  ven¬ 
dors  to  know  their  environment  as 
technical  support  calls  happen.  If 
Technical  Support  has  this  informa¬ 
tion,  then  the  end-user  does  not  have 
to  spend  a  great  deal  of  time  explaining 
the  environment,  but  can  focus  on 
describing  the  symptoms  of  the  prob¬ 
lem  in  in  effort  to  solve  the  crisis  at 
hand.  In  addition,  a  key  metric  in  any 
technical  support  organization  is  time 
to  resolution  (TTR). 


Providing  the  tools  described 
above,  allows  the  end  user  to  take  a 
larger  portion  of  problem  solving  into 
their  own  hands  and  allows  them  to 
better  manage  their  issues,  yielding  a 
better  TTR.  Simple  benefits  of  a 
system  such  as  this  allow: 

•  End  users  to  not  have  to  spend 
endless  hours  on  the  phone  trying 
to  explain  their  environment. 

•  Vendors  to  not  require  a  large 
staff  of  "pre"  support  people  to 
manage  phones  and  use  these 
resources  to  problem  solve. 

Why  doesn’t  this  happen  today?  One 
issue  has  to  do  with  communication 
within  the  company  that  provides  the 
technical  support.  In  many  instances, 
clients  hire  the  vendor  to  do  some 
type  of  implementation.  When  the 
implementation  is  complete,  the 
details  of  the  implementation  are  to 
be  entered  into  a  database  so  that 
they  can  be  referenced  by  Sales, 
Consulting,  and  Support.  However, 
most  companies  do  not  have  this  level 
of  infrastructure  or  documentation 
tools  and  if  they  do,  access  to  the 
information  is  difficult.  When  end 
users  call  the  support  center,  they  are 
often  frustrated  with  the  vendor’s  lack 
of  information  about  their  specific 
configuration.  The  end  user  looks  at 
this  situation,  as  "The  Company"  was 
here  yesterday  "The  Company"  ought 
to  know  my  environment. 
Nevertheless,  the  reality  is  that  differ¬ 
ent  people  in  different  organizations 
who  do  not  typically  communicate 
have  worked  or  are  working  on  the 
issues. 

So  what  is  the  answer?  How  does  a 
vendor  provide  proactive  technical 
support?  The  first  answer  is  for  them 
to  devise  the  portal  as  previously 
discussed.  Giving  users  access  to 
information  is  the  first  step.  This  lim¬ 
its  the  number  of  calls  to  the  support 
center  and  allows  support  profes¬ 
sionals  to  spend  more  time  helping 
customers  solve  real  problems. 

The  next  step  is  to  enable  the  portal 
to  collect  data  at  the  customer  site. 
This  data  would  be  collected  at  the 
vendor  site.  When  a  client  calls  the 


vendor,  the  vendor  would  have 
access  to  the  information  that  makes 
up  the  end-user’s  environment.  The 
information  that  could  live  within  the 
portal  could  be: 

•  Server  type  with  OS  version  and 
patch  levels 

•  Storage  subsystem  type  including 
disk  drive  firmware 

•  Tape  device  type  including 
firmware 

•  Application  version  including 
patch  levels 

If  this  data  were  automatically  col¬ 
lected  on  a  regular  basis  then  when  a 
call  came  into  the  support  center,  the 
support  professional  could  begin  ask¬ 
ing  questions  related  to  the  problem 
the  user  is  experiencing  versus  trying 
to  capture  all  of  the  above  data.  In  a 
perfect  world,  the  portal  would  com¬ 
pare  the  data  captured  to  a  supported 
matrix.  If  there  were  any  anomalies 
between  supported  configurations 
and  the  existing  configuration,  this 
information  would  stand  out  first  and 
could  be  given  to  the  end  user  very 
quickly  in  a  first  attempt  to  solve  the 
problem. 

Utopia 

Wouldn’t  it  be  great  if  the  portal 
could  report  to  the  end-user  when  a 
change  is  made  in  the  infrastructure 
that  it  is  "un-supported"  or  that  it 
could  send  a  list  of  known  issues  that 
exist  in  the  new  configuration.  End- 
users  could  receive  an  email  that 
states  what  the  issues  are  or  they 
could  log  into  a  website  that  had  this 
information.  The  information  that 
could  be  viewed  could  then  set  goals 
for  IT  professionals  each  day  when 
they  arrived  at  the  office  to  spend  an 
hour  or  so  making  sure  that  the 
environment  is  rock-solid.  This  type 
of  pre-emptive  strike  against  the  envi¬ 
ronment  can  prevent  issues  that 
cause  downtime  in  the  future. 

To  really  go  for  the  gold,  it  would  be 
fabulous  if  these  portals  also  collected 
information  such  as: 

•  Performance  data 

•  Data  growth  statistics 

•  CPU  utilization 

•  Paging  and  memory  usage 


If  the  portal  could  then  compare  all 
of  this  data  with  data  from  "like"  or 
peer  end-users  and  recommend 
tweaks  to  the  environment  to  better 
control  data  growth  or  increase 
performance,  this  would  allow  IT 
professionals  around  the  globe  to 
learn  from  each  other  and  for  lesser- 
experienced  system  administrators 
to  gain  and  share  knowledge  that 
does  not  exist  today. 

Who  provides  service  like  this  today? 
Very  few  vendors  do.  The  reason  is 
that  the  technology  for  support  orga¬ 
nization  has  not  existed  until  recently. 
Luminate,  recently  purchased  by  EMC, 
has  technology  that  works  on  support¬ 
ing  a  portal.  Another  company  that 
has  made  a  good  deal  of  strides  in  this 
area  is  Motive.  Both  companies  have 
spent  a  good  deal  of  time  focusing  on 
technical  support  that  has  been 
neglected  for  some  period  of  time. 
Additionally,  original  SSPs,  like  Storage 
Networks,  established  portal-based 
services  just  for  this  reason. 

While  all  of  this  sounds  great,  the 
reality  is  there  are  some  potential 
issues  with  this  philosophy.  Some 
companies  may  not  want  vendors 
having  access  to  this  information. 
Financial  institutions  may  not  legally 
be  able  to  let  certain  information 
outside  their  environment,  making 
troubleshooting  a  little  more  difficult. 
One  option  would  be  to  see  if  the 
same  vendor  support  portal  could  be 
implemented  internally  whereby  the 
vendor  could  send  information  to 
the  client,  such  as  supported  config¬ 
urations.  Whatever  the  plan,  it  all 
depends  on  leveraging  the  informa¬ 
tion  that  lives  in  the  infrastructure. 
Support  is  difficult.  Anything  that  can 
be  done  to  help  vendors  and  clients 
to  work  together  is  sure  to  get  con¬ 
tinued  consideration  as  value-add  in 
the  RFQ  process. 


For  more  information  on  Network 
Storage  and  the  Enterprise 
Storage  Group,  go  to: 

www.enterprisestoragegroup.com 


How  YOU  DOING  ON  THOSE  QUARTERLY  GOALS? 


When  you  rule  information  instead  of  the  other  way  around,  things  look  up. 
Every  day,  EMC  Automated  Networked  Storage  lets  IT  departments  cut  60 
percent  out  of  per-megabyte  costs,  consolidate  storage  management,  and  triple 
disk  utilization  —  all  at  a  surprisingly  affordable  price.  Which  might  explain 
why  no  one  delivers  more  networked  storage  than  EMC. 


Learn  how  other  companies  did  more  for  less  in  the  EMC  Answers  White  Paper  series  at  EMC.com/ANS 
MAXIMIZE  your  automated  networked  storage  knowledge  by  registering  for  monthly  updates  at  EMC.com/insite 


CALL  the  experts  and  discuss  how  you  really  can  get  more  for  less  with  EMC  at  1-866-464-7381. 


EMC 
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where  information  live* 


EMC'  and  EMC  are  registered  trademarks  and  where  information  lives  is  a  trademark  of  EMC  Corporation.  ©2002  EMC  Corporation.  All  rights  reserved. 
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ROYAL,  Continued  from  page  77 
had  considerable  opportunity  to  fail.  It 
could  ha\  oeen  tne  shortest  job  of  my 
career,"  Heeley  quips. 

Begging  off  for  more  time  was  not  an 
option. The  CIO  mandated  the  fixing  of 
problems  discovered  during  a  security 
audit  conducted  in  the  fall  of  2001  by 
R&SA  USAs  parent  in  London,  the  seventh- 
largest  property  and  casualty  insurance 
company  worldwide.  R&SA  conducted 
this  audit  as  part  of  a  global  effort  to 
implement  international  computer  securi¬ 
ty  best  practices,  which  has  led  the  com¬ 
pany  toward  security  seal-of-approval,  ISO 
17799  certification.  Corporate  gave  R&SA 
USA  until  December  2002  to  comply  with 
the  auditors  recommendations. 

A  new  client  operating  system  fixed  a 
major  flaw  discussed  in  the  audit:  Win¬ 
dows  95  s  weak  passwords,  bypassed  sim¬ 
ply  by  clicking  cancel. Thibodeau  cites 
other  reasons  for  the  move  to  XP  —  sup¬ 
port  for  new  equipment  such  as  digital 
cameras  for  insurance  adjusters  and 
built-in  remote  control  features,  good  for 
assistance  from  the  help  desk  and  appli¬ 
cation  training  from  business  managers. 

Building  a  software  mall 

A  wayward  software  distribution  pro¬ 
gram,  Novadigm’s  Enterprise  Desktop 
Manager  (EDM)  software,  also  needed 
immediate  fixing.  EDM,  purchased  in 
1997,  had  two  nasty  habits.  For  one,  it 
overwrote  Dynamic  Link  Libraries  (DLL) 
used  by  older  DOS  and  mainframe  appli¬ 
cations  each  time  it  pushed  out  new 
code, such  as  antivirus  updates. That 
meant  after  each  EDM  session,  mission- 
critical  applications  on  peoples  desk¬ 
tops  would  crash,  Heeley  says.  Second, 
when  updating,  EDM  assumed  control  of 
target  PCs  at  the  next  login,  even  when 
that  meant  pushing  an  enormous  file  at 
a  user  dialing  in  from  the  road  for  a 
quick  e-mail  check. 

“It  was  so  bad  that  someone  actually  put  a  sign  on 
one  server  that  said, Turn  me  off  on  Thursday  so  I  don’t 
get  EDMed,’”  Heeley  recalls. 

In  August  2001,  while  in  discussions  with  Novadigm’s 
CEO  over  fixing  EDM, Heeley  learned  of  Novadigms 
new  product,  Radia.  Like  EDM,  Radia  pushes  out  soft¬ 
ware  updates,  but  gives  users  three  times  to  refuse  a 
download.  More  importantly  for  this  project,  end  users 
can  download  their  own  applications,  per  policies  and 
licenses,  from  an  intranet  “software  mall." 

R&SA  USA  took  stock  of  all  software  and  hardware 
assets  using  Peregrine  Systems’ Asset  Management  soft¬ 
ware.  It  discovered  450  applications  to  place  in  the 
mall. “We  found  software  and  media  that  we  didn’t  even 
know  about’’ says Tricia  Laurion.a  network  engineering 
project  manager.  Before  this,  R&SA  USA  had  no  such 
inventory. 

The  inventory  even  became  the  basis  of  another 
money-saving  project.Thibodeau  says  he  is  negotiating 
higher-volume  agreements  on  licenses  for  duplicate  map¬ 
ping  s<  >ftware  and  other  titles  that  individual  offices  buy. 

S<  >  Ran ia  solved  two  problems  for  R&SA  USA:  the  soft¬ 
ware  license  control  issue  named  in  the  security  audit, 
and  the  challenge  of  how  end  users  would  reinstall 
applications  during  the  upgrade. 

With  the  technology  means  for  the  self-service  cutover 


Centrally  managed,  locally  placed 

In  orchestrating  a  self-service  client  operating  system  upgrade, 
Royal  &,  SunAlliance  implemented  a  new  software  distribution  system 
using  Novadigm’s  Radia  Manager.  Centrally  managed  servers  push 
updates  to  servers  at  each  remote  office  so  users  download  new 
software  over  the  LAN.  Meanwhile,  IT  maintains  hardware  inventory 
and  user  profle/access  rights  in  central  databases. 


Corporate  and  IT  headquarters,  Charlotte,  N.C. 
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materializing, Thibodeau  and  Heeley  turned  their  atten¬ 
tion  to  the  business  side  of  the  house. They  enlisted  the 
support  of  Karen  Martin,  who  manages  the  26  facility 
managers  overseeing  R&SA  USAs  remote  sites.  With  her 
backing,  those  facility  managers  became  project  touch¬ 
stones,  preparing  their  sites  for  XP  deployment  with 
duties  such  as  scheduling  upgrade  days,  arranging  for 
teleworker  updates  and  being  the  XP  guinea  pigs. 

“She  made  the  facility  manager’s  role  as  site  liaison 
part  of  their  jobs,  included  it  in  their  performance 
review.  We  could  never  have  done  this  without  that  kind 
of  support, ’’Thibodeau  says. 

Martin  adds  that  her  crew  was  an  obvious  choice 
because  many  are  technically  adept.  Some  are  even  for¬ 
mer  IT  members  from  the  days  before  R&SA  USA  out¬ 
sourced  its  help  desk  to  IBM,  when  all  large  offices  had 
a  full-time  IT  staffer. 

By  October  2001,  the  infrastructure  team  had  completed 
the  major  steps  of  the  self-service  plan  and  had  begun 
work  on  the  several  large  issues  remaining. 

Remembering  the  pain  of  EDM, Thibodeau  created  a 
team  to  certify  that  any  application  put  into  the  Radia 
software  mall  would  work  with  XP  and  Internet 
Explorer  6.0.  One  of  the  team’s  tasks  would  be  fixing 
DLL  conflicts, Thibodeau  says.  But  should  applications 
still  break  after  installation,  Radia’s “self-healing”  feature 


Radia  local 
application 
portfolio 
server 


would  repair  broken  applications  auto¬ 
matically  the  next  time  a  user  logged  on 
to  the  network. 

Betting  active 

R&SA  USA  also  had  to  roll  out  Micro¬ 
soft’s  Active  Directory  because  Radia 
relies  on  the  directory  service  to  store  a 
user’s  identity  and  software  entitlement 
information. The  company  had  used 
Active  Directory  in  a  limited  fashion  to 
support  a  few  Windows  NT  application 
servers  and  about  400  Win  2000 
machines,  but  certainly  didn’t  store  in  it 
the  meaty  data  to  determine  every  user’s 
software  entitlements.  If  that  data  was 
anywhere  it  was  strewn  across  directory 
systems  —  Novell  Directory  Services 
(NetWare  is  used  for  print  and  file  shar¬ 
ing)  and  X.500  for  Unix  systems  —  or 
stored  within  mainframe  programs,  Lotus 
Notes  or  other  applications. 

This  Active  Directory  rollout  also 
became  the  foundation  for  an  identity 
management  initiative.  Active  Directory 
will  become  the  U.S.  company’s  metadi¬ 
rectory  —  eventually  tying  into  a  global 
metadirectory  —  storing  employee  pass¬ 
words,  locations,  job  roles  and  hardware 
inventories,  all  of  which  help  determine 
software  entitlements. 

Eventually,  Active  Directory  will  tie  into 
R&SA  USAs  PeopleSoft  human  resources 
application  so  as  the  HR  database  is 
updated,  the  changes  are  passed  to 
Active  Directory.  In  turn,  Active  Directory 
will  update  the  user’s  profile  and  alert 
other  systems  involved.  R&SA  USA  has 
made  its  software  distribution  invest¬ 
ment  do  double  duty,  gaining  identity 
management  without  buying  another, 
complex  provisioning  platform  often 
costing  $1  million  to  implement. 

But  first,  R&SA  USA  had  to  solve  a 
troublesome  password  management  prob¬ 
lem.  Users  had  on  average  six  passwords 
apiece  for  accessing  network  operating 
systems  and  applications,  Heeley  says.They  would  need 
all  of  them  to  reinstall  their  applications.  But  the  IT  team 
knew  many  wouldn’t  remember  all  their  passwords,  given 
that  at  the  time  password-related  issues  accounted  for 
40%  of  R&SA  USA  help  desk  calls,  he  adds. 

Heeley  searched  out  password  management  products, 
and  in  April,  less  than  a  month  before  the  first  self-instal¬ 
lation  upgrade,  settled  on  M-Tech  Mercury  Information 
Technology’s  P-Synch. Tapping  into  Active  Directory, 
P-Synch  could  synchronize  passwords  so  that  one 
would  suffice.  It  would  then  enable  ongoing  self-installa¬ 
tion  resets,  reducing  help  desk  calls  and  related  out¬ 
sourcing  costs  (see  related  storywww.nwfusion.com, 
Doc  Finder:  3040). 

Onlg  three  questions 

The  team  turned  to  IBM’s  System  Migration  Assistant 
(SMA)  for  a  back-up  and  restore  tool  friendly  enough 
for  end  users  to  control  during  the  cutover.“We  had  to 
wipe  and  load.  Microsoft  doesn’t  let  you  upgrade  from 
Windows  95  to  XP,”says  infrastructure  team  member 
Mike  Johnson,  of  the  necessity  to  format  each  hard 
drive  as  part  of  the  upgrade  process. 

SMA  backed  up  to  and  reinstalled  from  a  network 
server.  Concerned  about  security,  the  team  configured 

See  ROYAL,  page  82 
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THE  MARKET  FOR  METROPOLITAN  ETHERNET 
SERVICES  IS  HEATING  UP. 

Public  Ethernet  is  gaining  popularity  from  its  low  cost,  simplicity  and  the 
widespread  comfort  commercial  customers  already  have  with  Ethernet  in  the 
LAN,  where  it  has  long  been  the  dominant  technology,  according  to  a  recent 
Gartner,  Inc.  report.The  drivers  for  this  bandwidth  increase  are  many,  includ¬ 
ing  the  rapid  consumption  of  LAN  bandwidth  feeding  networked  PC  appli¬ 
cations,  data  backup  and  disaster  recovery.There  is  also  a  growing  need  for 
high-speed  connections  to  the  Internet,  to  myriad  internal  company  sites 
and,  increasingly,  to  business  partners. 

In  order  to  satisfy  this  demand  for  bandwidth  in  a  cost-effective  manner, 
many  service  providers  (SPs)  are  looking  to  Ethernet  technologies.  Ethernet 
has  already  been  proven  to  deliver  low-cost  bandwidth  in  the  LAN  and  offers 
great  potential  for  lower  cost  bandwidth  in  the  WAN  compared  with  tradi¬ 
tional  carrier  data  services,  such  as  ATM,  time  division  multiplexing  (TDM) 
and  frame  relay. 

A  major  advantage  metro  Ethernet  services  offer 
over  traditional  TDM  offerings  is  flexible  band¬ 
width  provisioning,  says  Bob  Klessig,  director  of 
engineering  for  the  Internet  Systems  Business 
Unit  at  Cisco  Systems. 

"Metro  Ethernet  SPs  can  scale  up  user  band¬ 
width  from  1  Mbps  to  a  full  gigabit  per  second  in 
increments  of  1  Mbps  or  less,  and  do  so  in  a  mat¬ 
ter  of  hours,  without  expensive  SP  or  customer 
equipment  upgrades,"  Klessig  says.  "In  fact,  it  is 
possible  to  enable  end  users  of  metro  Ethernet 
services  to  provision  their  own  bandwidth  dynami¬ 
cally,  using  Web-based  provisioning  applications." 

Cisco  recognizes  that  SPs  need  a  way  to  realize 
the  potential  of  these  new  Ethernet  services  while 
still  serving  customers  that  use  traditional  WAN 
services.  Many  customers,  for  example,  have 
branch  and  regional  offices  that  are  well-served 
by  TDM,  frame  relay  or  ATM  service  atTI  speed 
and  less,  but  face  bandwidth  constraints  in  WAN  connections  to  their  head¬ 
quarters.  It  can  be  expensive  for  customers  and  SPs  alike  to  upgrade  those 
headquarters  links  fromTI  toT3,  or  fromT3  to  OC-3.  A  better  solution  is  to 
offer  an  Ethernet  connection,  which  can  be  provided  at  virtually  any  speed 
up  to  1  Gbps  and  will  work  with  all  existing  services  at  the  branch  loca¬ 
tions. 

For  regional  metro,  metro  aggregation  and  metro  access,  the  Cisco  Metro 
Ethernet  Switching  portfolio  enables  SPs  to  deliver  profitable,  comprehen¬ 
sive  Ethernet  services  (see  figure).  At  the  same  time,  the  portfolio  allows 
SPs  to  protect  their  investments  in  existing  ATM,  frame  relay  and  TDM 
infrastructure  -  and  corresponding  revenue  -  by  allowing  those  services  to 
seamlessly  interconnect  with  metro  Ethernet  services.  Cisco  also  helps  SPs 
minimize  total  cost  of  ownership  for  new  services  with  its  extensive  auto¬ 
mated  operations  support. 

A  Full  Metro  Ethernet  Lineup 

The  Cisco  Metro  Ethernet  Switching  portfolio  includes  products  that 
address  all  SP  requirements: 

•  The  Cisco  7600  Series  delivers  metro  aggregation  with  high-touch 
Layer  2  and  Layer  3  IP  services  and  Ethernet  connectivity  at  up  to  10  Gbps. 
It  supports  interworking  with  ATM  services  and  metro  Ethernet  services 
over  Multiprotocol  Label  Switching  (MPLS)  core  networks  using  SONET 
links  of  up  to  OC-48/STM-16. 

•  The  Cisco  Catalyst  6500  Series  multilayer  switches  deliver  metro 
Ethernet  aggregation  with  Layer  2  and  Layer  3  IP  services  with  10  Gbps 
Ethernet  connectivity.  Optional  optical  modules  support  short-haul  (10  kilo¬ 
meters)  and  long-haul  (up  to  50k)  distances. 

•  Cisco  Catalyst  4500  Series  switches  with  integrated  resiliency  are 
designed  specifically  for  both  aggregation  of  business  services  and  sub¬ 
scriber  access  in  metropolitan-area  networks  (MANs)  that  take  advantage 


of  the  simplicity  and  flexibility  of  optical  Ethernet  in  the  First  Mile. 

•  Cisco  Catalyst  3550  Series  switches  are  powerful,  yet  cost-effective, 
fixed-configuration  switches  that  are  ideal  for  providing  metro  access  to 
enterprise  as  well  as  small  and  medium-sized  business  customers. 

•  Cisco  Catalyst  2950  Series  switches  are  affordable,  fixed-configuration 
switches  intended  for  providing  metro  access  to  residential  customers. 

•  The  Cisco  Coarse  Wave  Division  Multiplexing  (CWDM)  Gigabit 
Interface  Converter  (GBIC)  solution  allows  scalable  and  easy-to-deploy 
Gigabit  Ethernet  services.  The  Cisco  CWDM  GBICs  and  CWDM  optical 
add-drop  modules  (OADMs)  enable  the  design  of  flexible  and  highly 
available  networks. 

Cisco  Metro  Ethernet  Switching  is  a  key  component  of  Cisco  Metro 
Solutions,  which  deliver  the  most  comprehensive  multilayer  service  portfolio 
for  providers  to  quickly  scale  their  customer  base  and  revenues.  This  port¬ 
folio,  which  includes  Metro  Ethernet  Switching,  Carrier  IP/MPLS,  and 
Metro  Optical  Transport  platforms  and  technologies,  can  ensure  a  flexible 
and  efficient  foundation  for  profitable  metro  services. 


Metro  Aggregation  Regional  Metro 

Maximum  Flexibility 

The  Cisco  Metro  Ethernet  Switching  portfolio  has  the  flexibility  to  support 
both  Layer  2  and  Layer  3  metro  services  with  equally  high  proficiency.  For 
example,  the  portfolio  not  only  supports  the  traditional  802. IQ  virtual  LAN 
(VLAN)  control  plane,  but  also  enhances  network  scalability  by  comple¬ 
menting  802.1Q  with  Ethernet  over  MPLS  (EoMPLS).  EoMPLS  enables  the 
extension  of  Layer  2  Ethernet  services  on  a  metro,  national  or  even  global 
carrier  scale. 

Especially  important  to  established  SPs  is  the  ability  of  the  Cisco  Metro 
Ethernet  Switching  portfolio  to  perform  network  aggregation  for  metro 
Ethernet  services  in  combination  with  ATM,  frame  relay  andTDM  services. 
This  enables  carriers  to  use  the  same  network  equipment  platform  for  metro 
Ethernet  and  legacy  services,  thereby  achieving  greater  efficiencies  in 
equipment  management  and  personnel  training.  As  a  result,  operational 
costs  remain  low  and  SPs  can  preserve  the  revenue  they  currently  generate 
from  ATM,  frame  relay  andTDM  services  while  supporting  customers  with 
metro  Ethernet  services. 

In  short,  the  Cisco  Metro  Ethernet  Switching  portfolio  is  versatile,  power¬ 
ful  and  flexible  enough  to  ensure  that  SPs  can  give  their  customers  the 
bandwidth  and  service  levels  they  need,  at  a  price  they  can  afford  -  and  still 
reap  a  profit. 

For  more  information 

Go  to  www.cisco.com/go/metroethernet.  Or  visit 
www.nwfusion.com/go/metro  to  download  a  copy  of 
the  whitepaper,  "Deploying  Metropolitan  Ethernet 
Services:  Features  and  Technologies  Essentials." 


Cisco  Metro  Ethernet  Switching 

The  Cisco  Metro  Ethernet  Switching  portfolio  includes  products  that  enables  service  providers  to  deliver  profitable, 
comprehensive  Ethernet  services,  and  provides  interworking  with  existing  TDM,  frame  relay  and  ATM  services. 
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SMA  to  upload  data  files  to  user-specific 
home  directories  on  the  server.  SMA  also 
saved  the  user’s  “personality  elements’’ 
such  as  screen  savers, Thibodeau  says.The 
latter  “was  such  a  hit  with  the  users  [that] 


they  were  more  apt  to  tolerate  blips  dur¬ 
ing  the  conversion.” 

The  network  team  further  customized 
the  off-the-shelf  product, configuring  it  to 
run  in  batch  mode,  bypassing  the  tool’s 
graphical  user  interface. The  team  wrote 


scripts  to  automate  responses  to  SMA 
prompts  and  altered  numeric  messages  to 
human-friendly  messages, “so  users  would 
know  they  were  getting  a  good  backup,” 
Johnson  says. 

A  custom  script  also  made  the  XP 
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Fast,  accurate,  automatic.  Perfect  backup  and  restore  for  small  and  midsize  businesses. 


It  it's  worth  creating,  it's  worth  saving  with  Dantz  Retrospect? 
Retrospect  is  simply  the  most  intelligent  backup  software  for 

- fast,  thorough  backups  and 

100%  accurate  restores  of  your 
critical  business  data. 


“Retrospect  creates  its  own 
backup  filing  system  that 
combines  for  speed,  convenience 
and  easy  management,  giving 
us  good  reason  to  designate 
i I  a  h’or/J  (  lass  product." 

-  Network  World 
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Retrospect's  patented  technolo¬ 
gy  automates  backup  and 
restore  of  notebooks,  desktops, 
file  servers,  and  line-of-business 
application  servers  such  as 
SQL  and  Exchange.  There's 
>■  manual  scheduling  or  tape  juggling.  Backup 
ire  automatically  adjusted  ensuring  that  every 
•  the  network  is  protected  -  even  notebooks  that 
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come  and  go.  Retrospect  supports  Windows?  Linux,  Solaris, 
and  Macintosh?  and  adapts  easily  to  your  existing  data 
storage  hardware. 

Trusted  worldwide  in  millions  of  computers  daily,  Retrospect 
is  the  intelligent  solution  for  businesses  that  must  rely  on 
perfect  file  protection,  every  time,  every  day. 

Dantz  Retrospect.  It's  the  only  backup  software  you  will 
ever  need. 

Start  today  with  the  Top  10  Backup  Tips, 
visit  www.dantz.com/v6 

or  call  1-800-225-4880  bhihbbhbh 

for  more  information. 


Intelligent  Backup  and  Restore 

(02002  Dantz  Development  Corporation.  Retrospect  and  the  Dantz  logo  are  registered  trademarks 
of  the  Dantz  Development  Corporation.  Ail  other  trademarks  are  the  property  of  their  respective  owners. 
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install  a  truly  unattended  process, 
answering  XP’s  pop-up  questions  to  keep 
the  install  from  pausing. 

Ultimately  end  users  launched  the  entire 
process  —  backup,  hard  drive  format,  pass¬ 
word  synchronization,  operating  system 
upgrade  and  installation  of  mandatory 
applications  —  by  answering  three  simple 
questions  from  a  custom  script:  What  type 
of  PC  do  you  have:  desktop,  laptop  or 
home  PC  (to  determine  if  VPN  or  remote 
services  were  needed)?  Where  are  you 
located  (to  determine  what  server  to  use)? 
And.  what’s  your  main  network  ID  and 
password?  Known  to  all,  that  password 
would  then  sync  with  others. 

The  process  took  about  two  hours, 
during  which  IT  trained  users  on  XPRadia 
and,  if  one  of  the  company’s  nearly  1,200 
teleworkers,  also  on  XP’sVPN-IPX  and 
VPN-IP  services. 

More  online! 

Get  fun  facts  on  Royal  & 
SunAlliance’s  XP  project. 

DocFinder:  3039 

After  training,  users  followed  written 
instructions  to  restore  data  by  typing  in  a 
.bat  command  and  downloading  pro¬ 
grams  from  Radia.  Along  with  the  restore, 
Radia  automatically  downloaded  corpo¬ 
ratewide  mandatory  programs  such  as 
word  processors  and  e-mail  clients.  IT 
typically  needed  only  one  person  onsite 
to  be  the  “XP  coach”  for  user  questions. 

In  all,  only  26  IT  people,  working  part- 
time  on  this  project,  took  part  in  the 
actual  cutover. 

Servers  Far  all 

R&SA  USA  needed  to  modify  the  net¬ 
work  only  slightly  At  headquarters,  the 
infrastructure  team  installed  an  Active 
Directory  server,  a  main  Radia  Manager 
server  and  an  Oracle  database  for  inven¬ 
tory  information  on  its  standard  fare,  Win 
2000  rack-mounted  Compaq  servers. 

The  team  issued  each  remote  office  its 
own  low-end  Compaq,  Win  2000  Server  to 
house  Radia’s  software  mall,  forgoing  back¬ 
up  servers  to  rely  on  those  connected  via 
the  WAN  for  failover.  Now  IT  in  Charlotte 
can  upload  applications  or  patches  to  their 
local  Radia  Manager. '[lien,  in  off-peak 
hours,  the  Radia  servers  will  synchronize. 
Local  servers  also  house  XP’s  RIS.So  down¬ 
loads,  from  the  XP  install  to  ongoing  anti¬ 
virus  updates,  are  pushed  to  desktops  over 
high-speed  LAN  links,  not  the  slower  WAN. 

While  network  executives  know  they 
can’t  be  separate  from  the  business, 
rarely  is  the  converse  true.  By  creating  a 
process  that  eases  the  pain  of  a  cutover, 
then  trusting  employees  to  do  their  part, 
IT  gave  colleagues  a  rare  glimpse  into 
its  world. 

“Employees  now  have  a  greater  appreci¬ 
ation  for  what  has  to  take  place  in  IT? 
Martin  says,  adding  that  ultimately  the 
people,  not  just  the  technology,  caused 
success.  ■ 


With  all  the  turmoil  in  the  telecom  industry  today,  it’s  easy  to  feel  like  you’ve  been 
caught  in  the  “perfect  storm.”  You  worry  that  choosing  the  wrong  network  provider 
could  leave  your  company  vulnerable.  Conversely,  you  worry  that  delaying  decision- 
making  could  leave  you  behind  the  curve. 

SAVVIS  customers  tell  us  they’re  on  course.  Their  IP  VPN  is  getting  the  job  done 
for  voice  over  IP  (VoIP),  global  video  conferencing,  ERP,  and  more. 


The  Network  that  Powers  Wall  Streefu  From  Wall  Street  to  Main  Street,  SAVVIS  is  the  financially  sound  choice  for  people 

who  demand  a  proactive  managed  IP  service  provider.  SAVVIS  has  been  delivering 
high  performance  IP  VPN  and  managed  hosting  services  to  financial  institutions, 
professional  services  firms,  and  retail  enterprises  for  years.  And,  SAVVIS  has  one 
of  the  strongest  balance  sheets  in  the  industry. 


1-800-SAVVIS- 1 
www.savvis.net/testimonials 


Don’t  just  take  our  word  for  it.  Visit  our  web  site  and  discover  what  the  Chicago 
Board  Options  Exchange,  Looksmart,  the  Philadelphia  Stock  Exchange,  RM  Crowe, 
Shearman  &  Sterling,  Fitch  Ratings,  Telezoo  and  so  many  others  have  to  say  about 
working  with  SAVVIS. 


Trust  the  Network  that  Powers  Wall  Street 

to  Empower  your  Business.' 
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Tasked  with  finding  an  economical  way  to  deliver  40 
hours  of  training  annually  to  each  of  its  more  than 
180,000  employees,  the  U.S.  Department  of  Veterans  Affairs 
looked  to  the  heavens. There  it  found  the  answer  in  the 
satellite  network  it  used  to  provide  unidirectional  broad¬ 
casts  to  its  major  medical  centers  across  the  country, 
including  Puerto  Rico. 

The  satellite  network  was  serving  up  four  channels  of 
live  and  prerecorded  television  content,  mostly  training 
and  VA  news,  from  an  uplink  center  in  St.Louis.lt  used 
dedicated  bandwidth  on  PanAmSat’s  Galaxy  10  satellite, 
says  Craig  Davis,  a  computer  specialist  for  the  VA  in 
Austin,  Texas. 

Davis  and  a  team  of  four  others,  including  consultants 
from  Cisco.  IT  Broadcasting  and  Northrop  Grumman,  fig¬ 
ured  the  satellite  offered  the  best  means  of  beaming  band¬ 
width-intensive  video  to  individual  desktops  at  its  hospitals 
without  disrupting  the  terrestrial  WAN. 

With  IP  multicast  over  the  satellite  network,  the  VA 
Employee  Education  Service  (EES)  easily  could  stream 
a  file  to  multiple  desktops  and  could  cache  the  on- 
demand  content  close  to  requesting  users. 

Eight  months  into  this  massive  content  delivery  network 
deployment  project,  and  only  about  halfway  through,  the 


VA  is  seeing  dividends.  One  instance  alone  saved  the 
agency  $800,000,  Davis  says.  Rather  than  sending  800  peo¬ 
ple  to  Chicago  for  a  16-hour  Occupational  Safety  & 

Health  Administration  class,  at  an  estimated  cost  of  $1,000 
per  person,  the  VA  broadcast  the  session  to  user  desktops. 

The  team  can  add  the  St.  Louis  broadcast  facility  as  an 
endpoint  in  a  standard  ISDN  videoconference,  thereby 
widely  broadcasting  any  video  training.They  encode  a 
feed  and  push  it  live  over  the  open  channel  on  the  multi¬ 
cast  network  to  user  desktops.'A  single  H.320  [ISDN]  video 
call  at  384K  bit/sec  is  about  $50  an  hour,  plus  some  money 


Flavored  with  convergence 


While  voice  over  IP  is  the  flavor  of  the  month  at  many 
companies,  ice  cream  maker  Wells’  Dairy  focused  on 
video  as  the  ingredient  for  its  converged  network. 

Last  fall,  the  company  invested  $300,000  to  upgrade  its 
network  for  convergence,  adding  redundancy  and  fault- 
tolerance  into  the  backbone,  says  Jim  Kirby  senior  net¬ 
work  architect.  Kirby  says  he’s  accounted  for  switch  fail¬ 
ures  and  “acts  of  God,”  through  a  five-zone  triangu¬ 
lated  network  that  runs  over  the  company’s  pri-  ^  \  u  *  / 
vate  fiber  metropolitan-area  network  in  Le 
Mars,  Iowa. 

“We  are  running  an  all-glass  Gigabit 
Ethernet  core,  with  a  redundant  distribution 
i.iyei  and  redundant  paths  to  our  access 
svv  n  1  iV  Kirby  says,  further  stressing  the 
pic  ‘  •  nature  of  the  new  network."! 
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Video  meetings  are  one  of  IT’s  big  thrusts,  with  the 
team  pushing  IP  video  to  the  desktops  of  account  man¬ 
agers,  regional  sales  managers  and  other  power  users  in 
and  out  of  town.  Kirby  tells  of  an  account  manager  in 
Joplin,  Mo.,  who  recently  began  using  desktop  video  to 
deliver  biweekly  updates  on  a  major  buyer  to  company 
executives.  Previously,  the  company  dispatched  the  cor¬ 
porate  jet  to  bring  him  to  Le  Mars  for  those  updates,  at 
a  cost  of  about  $4,000  per  month,  he  says.  Wells’ 
Dairy  is  negotiating  with  at  least  one  third  party 
o  on  running  video  meetings  over  the  network, 

3  Kirby  says. 

But  IP  video  isn’t  only  for  the  far-flung.The  IT 
team  also  is  updating  all  of  its  conference 
rooms  in  Le  Mars  with  IP-based  videoconfer¬ 
encing  gear.  As  it  is  now, some  plant  personnel 
hop  across  town  as  many  as  four  times  per  day 
to  participate  in  daily  production  and  other 
meetings,  Kirby  says.  Giving  those  employees 
the  opportunity  to  meet  via  IP  video  sessions 
would  be  a  huge  time-saver,  he  adds.  Kirby  sup- 
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ports  about  one  IP  video  meeting  weekly  and  expects 
usage  to  grow. 

Network  World  honors  Wells'  Dairy  as  a  2002  User 
Excellence  Award  runner-up  for  its  convergence  project.  ■ 


DAN  DONOVAN 


for  the  bridge  that  connects  participants,”  Davis  saysENow, 
there’s  no  additional  cost  for  all  the  streaming  users.” 

Overall,  the  EES  expects  to  get  a  $25  million  return  on 
its  CDN  investment  over  the  next  three  years  by  deliver¬ 
ing  content  directly  to  users’  desktops,  Davis  says. 

Network  World  honors  the  VA  as  a  2002  User  Excellence 
Award  runner-up  for  its  innovative  approach  in  building  a 
massive  CDN  for  e-learning  programs.The  $4.5  million 
project  lets  the  VA  meet  federal  and  departmental  training 
mandates  while  creating  a  better-educated  workforce  and 
reaping  huge  cost  savings  over  alternative  methods.  ■ 
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Craig  Davis,  IT  coordinator  (kneel¬ 
ing,  center),  created  a  massive  con¬ 
tent  delivery  network  Tor  the  VA’s 
training  needs  using  satellite  tech¬ 
nology.  His  team  members  are 
(from  left):  Don  Saunders,  video 
engineer,  VA;  Steve  Pollock,  consult¬ 
ing  engineer,  Cisco;  Jim  Tomlinson, 
IT  advisor,  VA;  and  Ann  Margaret 
Howard,  CEO,  IT  Broadcasting. 
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That's  because  3Com  is  dropping  prices  on  a  range  of  high- 
performance  switches,  gateways,  and  wireless  access  points 

designed  for  small  and  mid-size  businesses.  Now  you  can  get  your  hands 
on  the  renowned  quality  and  reliability  our  customers  have  come  to 
expect  from  all  3Com  products,  for  a  price  you  won't  believe. 

3Com®  SuperStack®  3  Baseline  switches  for  wiring  closets,  and 
compact  OfficeConnect®  Plus  switches  for  desktops,  come  loaded 
with  features,  including  plug  and  play  installation,  wirespeed  switching, 
traffic  prioritization,  and  auto-detection  to  simplify  cabling. 

You've  always  wanted  3Com  quality  and  reliability  you  can  count 
on... now  you  can  have  it  for  a  great  price.  And  when  you  select  3Com, 
you  gain  access  to  a  wide  variety  of  networking  products  to  serve  every 
facet  of  your  growing  business. 

You  can  get  a  copy  of  TurboTax  Deluxe  for  free  when  you  purchase 
any  eligible  Superstack  and  OfficeConnect  product.  To  take  advantage  of 
these  spectacular  discounts  today,  visit  www.3com.com/until_now5  or 
call  1-800-NET-3COM. 
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altiris* 

mtuit/ve  >  manageability 

Altiris 

(801)  805-2400 
www.altiris.com 

Altiris  offers  a  full  line  of  Web-enabled  solu¬ 
tions  that  empower  organizations  to  easily 
manage  desktops,  notebooks,  handhelds 
and  servers  throughout  the  IT  lifecycle. 
Altiris  provides  fully  integrated,  complete 
systems  management  solutions  including 
deployment  and  migration,  software  opera¬ 
tions  management,  inventory  and  asset 
management,  client  backup  and  recovery 
and  help  desk  management.  Altiris'  core 
technologies  greatly  reduce  the  cost  and 
complexity  of  owning  IT  resources. 


amplifyAnet 


Amplify.net,  Inc 
(510)  656-1680 
www.amplifynet.com 

Amplify.net,  Inc.,  a  leader  in  solutions  that 
amplify  the  security,  resiliency,  capacity  and 
quality  of  IP  networks,  offers  a  complete 
line  of  advanced  Multi-Homed  WAN 
Gateways  for  small  to  mid-sized  enterprises 
and  branch  offices.  The  iSurfJanus  Product 
Family  integrates  advanced  broadband 
WAN  backup  and  dynamic  load  balancing 
with  optional  firewall  and  VPN. 


APC 

PowerStruXure 

(800)  890-4272,  x2484 

www.apcc.com/go/promo/powerstruxure 

APC's  PowerStruXure  is  an  entirely  new 
approach  to  data  center  support  that  sim¬ 
plifies  the  design,  building  and  management 
of  physical  infrastructure  with  an  innova¬ 
tive,  fully  engineered  and  tested  system.  The 
three  initial  core  solutions  that  comprise 
PowerStruXure  are  a  modular,  scalable, 

N+1  redundant  uninterruptible  power  supply 
(UPS);  zoned,  intelligent  power  distribution; 
PDU;  and  a  next  generation  rack  enclosure. 


ATTO  Technology,  Inc. 

ATTO  Technology,  Inc. 

ATTO  iPBridge1"  2500C/R/D 
(716)  691-1999 
www.attotech.com 

ATTO  Technology,  Inc.,  headquartered  in 
Amherst,  New  York,  is  a  global  leader  in 
Fibre  Channel  and  SCSI  storage-infrastruc¬ 
ture  solutions.  From  our  award-winning  lines 
of  host  adapters,  Fibre  Channel  bridges  and 
hubs,  to  SAN  software  solutions,  Fibre 
Channel-to-ATA  storage  arrays  and  the  new 
iPBridge™,  ATTO  products  improve  data 
availability,  productivity  and  total  cost-of- 
ownership. 


Avocent  Corporation 
AutoView  2000R 
(256) 430-4000 
www.avocent.com 

Avocent's  AutoView  2000R  is  an  all-in-one 
digital  and  analog  KVM  switch  for  complete 
server  control.  The  new  switch  provides  an 
analog  port  for  access  at  the  rack  and  an 
Ethernet  port  for  extended  or  remote  IP 
access  over  the  Internet.  AVWorks  is  a 
client-based  management  utility  that 
provides  simple  CLICK  and  CONNECT 
access  to  servers  attached  to  an 
AutoView  2000R. 


Cisco  Systems,  Inc. 

Cisco  Catalyst  ?  3550  Series  Intelligent 
Ethernet  Switch 
(408)  526-7208 
www.cisco.com 

The  Cisco  Catalyst®  3550  Series  Intelligent 
Ethernet  Switch  is  a  line  of  stackable,  multi¬ 
layer  switches  that  provide  high  availability, 
quality  of  service  (OoS),  and  security. 

With  a  range  of  Fast  Ethernet  and  Gigabit 
Ethernet  configurations,  the  Catalyst  3550 
is  a  powerful  option  for  enterprise  and 
metro  access  applications. 
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“In  skating  over  thin  ice,  our  safety  is  in  our  speed,” 
wrote  Ralph  Waldo  Emerson  in  his  1841  essay  “Prudence.” 
Such  prudence  certainly  applies  to  network  executives 
traversing  the  thin  ice  of  the  telecom  industry.  While  bank¬ 
ruptcies,  financial  shortfalls,  boardroom  scandals  and  the 
like  do  not  cause  immediate,  rampant  service  failures, 
they  are  treacherous  conditions  that  require  quick  move¬ 
ment  toward  contingency  plans. 

As  sure  as  heat  erodes  an  ice  sheets  strengths  pro¬ 
vider’s  massive  layoffs,  indictments  of  high-level  execu¬ 
tives,  uncertain  reorganization  plans,  worthless  employee 
stock  options  and  decline  in  new  technology  investments 
eventually  will  affect  its  service  —  perhaps  even  fatally 
Signs  of  degrading  service  include  missed  installation 
deadlines,  longer  trouble-ticket  resolution  or  increased 
finger-pointing,  extreme  difficulty  in  resolving  billing  mis¬ 
takes  and  generally  sloppy  customer  service  from  embit¬ 
tered,  beleaguered  employees. 

Naturally  network  executives  are  playing  it  cautious. 
They  are  seeking  alternatives  to  guarantee  that  looming 
service  problems  do  not  disrupt  networks.The  central 
trade-off  is  between  cost  savings  from  volume  discounts 
using  one  provider  and  the  increased  reliability  of  con¬ 


tracting  with  two  or  more  carriers,  they  say. 

“Using  multiple  [service  providers]  can  provide  a  com¬ 
pletely  stable  network,  but  it  will  increase  my  costs  25%  a 
year  —  at  a  minimum  that  equates  to  $100,000  a  year[’ 
says  Bernie  Lubitz,  director  of  telecommunication  tech¬ 
nology  and  services  for  Martin  Memorial  Health  Systems 
(MMHS),a  hospital  system  with  10  locations  in  southern 
Florida.  That’s  especially  harsh  during  this  slow  economy 
when  managed  healthcare  is  being  pressured  to  provide 
better  care  at  lower  costs. 

MMHS  traditionally  has  gone  the  cost-savings  route  with 
a  single  provider,  most  recently  troubled  competitive  local 
exchange  carrier  (CLEC)  Adelphia  Business  Solutions. 
While  Lubitz  and  his  legal  staff  did  due  diligence  on 
Adelphia’s  finances  before  contracting  with  the  carrier 
two  summers  ago,  they  could  not  have  realized  the  buried 
accounting  improprieties  that  would  lead  to  a  Chapter  1 1 
bankruptcy  filing  in  March  of  this  year. The  CLEC  could 
be  the  poster  child  for  the  telecom  industry’s  woes. 
Adelphia  has  crumbled  under  a  massive  debt  load  arid 
leadership  practices  so  far  afield  that,  in  July,  federal  pros¬ 
ecutors  filed  an  indictment  for  alleged  corporate  pilfering 

See  TIPS,  page  Rfi 
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cyclades 

Everywhere  with  Linux 

Cyclades  Corporation 
AlterPatlT  ACS,  AlterPatlT  SM100, 

TS  Series 
(510)  771-6100 
www.cyclades.com 

Cyclades,  a  data  center  fault  management 
company,  enables  remote  management  of 
servers,  network  equipment  and  automation 
devices.  Its  products  help  data  center  man¬ 
agers  at  enterprise,  telecommunication  and 
Internet  companies  to  maximize  network 
and  server  availability.  Cyclades  offers  scal¬ 
able  products  leveraging  Linux  technology 
for  flexibility,  ease  of  customization,  securi¬ 
ty  and  innovation. 


CyberGuard  Corporation 
CyberGuard  Firewall/VPN  Appliances 
(954)  958-3878 
www.cyberguard.com 

CyberGuard's  high-security,  high-perform¬ 
ance,  easy-to-manage  firewall/VPN  appli¬ 
ances  are  designed  for  everything  from 
small  business  to  multi-gigabit  environ¬ 
ments.  Common  Criteria  EAL4+,  ICSA  and 
ITSEC  E3  certified,  the  appliances  use  mul¬ 
tilevel  security  to  treat  each  layer  of  the 
hardened  OS  discretely,  separating  network 
from  system  levels  to  provide  a  virtually 
impenetrable  firewall  environment. 


Z4  KEYNOTE 

I  •  "  The  Internet  Performance  Authority 

Keynote  Systems 
(800)  KEYNOTE 
www.keynote.com 

Keynote,  The  Internet  Performance 
Authority®,  is  the  worldwide  leader  in 
Internet  performance  management  services 
that  improve  the  quality  of  e-business. 
Keynote’s  services  enable  corporate  enter¬ 
prises  to  benchmark,  diagnose,  test  and 
manage  their  e-business  systems  both 
inside  and  outside  the  firewall. 


EQUINOX 

an  Avocent  Company 

Equinox 

Network-Based  Serial  Connectivity  Products 

(800)  275-3500 

www.equinox.com 

Equinox  develops  and  markets  high- 
performance,  reliable  and  cost-effective 
serial  connectivity  products.  The  Equinox 
SuperSerial  product  line  provides  the 
perfect  serial  connectivity  solution  for 
Retail/POS,  Access  Control,  Secure 
Console  Port  Access,  Process  Control, 
Industrial  Automation,  Dial  Access  and 
a  wide  variety  of  custom  applications. 


FOUNDRY 

NETWORKS 

Foundry  Networks,  Inc. 

(408)  586-1700 
www.foundrynetworks.com 

Foundry  Networks,  Inc.  is  a  leading  provider 
of  high-performance  enterprise  and  service 
provider  Ethernet  switching,  routing  and 
Web  traffic  management  solutions  including 
Layer  2/3  enterprise  LAN  switches,  Layer  3 
Backbone  switches,  Layer  4  -  7  Web  switch¬ 
es  and  Metro  Routers.  Foundry  is  also  a 
leader  in  10-Gigabit  Ethernet. 


Digital  V6 
(905)  513-3107 
www.digitalv6.com 

Digital  V6  Corp.  specializes  in  developing 
innovative  remote  network  management 
hardware  and  software  solutions.  Digital  V6 
was  the  first  to  introduce  an  over  IP  KVM 
device  with  automatic  server  monitoring, 
notification  and  remote  power  control, 
known  as  the  Kaveman.  Available  in  single 
and  eight  channel  versions,  Kaveman  gives 
network  administrators  complete  remote 
control  of  servers  via  a  web  browser,  down 
to  the  BIOS  level. 


Great  Lakes  Case  &  Cabinet 
Company,  Inc. 

GL840ES-2942  Enhanced  Series  Server 
Enclosure 

(866)  TRY-GLCC  (879-4522) 
www.werackyourworld.com 

The  GL840ES-2942  rack  cabinet  is  designed 
to  accept  any  combination  of  multi-vendor 
rack  mounted  servers,  including  the  1U 
"pizza  box"  servers  and  the  blade  server 
chassis.  The  infinitely  adjustable  rails  can 
accept  all  major  manufacturers'  servers,  as 
well  as  the  most  popular  1U  and  Zero-U 
PDU's. 
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FiBERLINK 


Fiberlink 
(800)  LINK  NOW 
www.riberlink.com 

Fiberlink  is  a  leading  provider  of  remote 
access  and  security  solutions.  Fiberlink 
offers  a  full  range  of  solutions  including: 
Fiberlink  Global  Remote  for  Mobile 
Professionals,  a  VPN  solution  delivering 
maximum  security,  high-availability  and 
superior  value;  Fiberlink  Secure  Broadband 
for  Telecommuters,  a  high  speed  solution 
for  the  home  office  with  policy-based 
integration  of  firewall,  virus  protection  and 
VPN  software;  and  Fiberlink  Global  Connect 
for  Branch  Offices,  a  managed  VPN 
solution  enabling  secure,  cost-effective 
connections  between  branch  offices. 


NETWORK 

{instruments 


Network  Instruments,  LLC 
Observer” 

(952)  932-9899 
www.networkinstruments.com 

Network  Instruments’  Observer®  product 
line  created  the  first  analyzation  tools  avail¬ 
able  to  troubleshoot  switched  environments 
and  also  provided  one  of  the  first  software- 
only,  Windows-based  protocol  analyzers. 
Network  Instruments  continues  to  lead 
the  market  by  offering  complete  LAN  and 
WAN,  wired  and  wireless  solutions  in  one 
platform. 
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Network  Technologies  Inc 
USB  Matrix  KVM  Switch 
(800)  742-8324 
www.nti1.com 

Matrix  KVM  Control  for  USB  computers! 
This  switch  allows  up  to  8  users  to  individu¬ 
ally  command  or  simultaneously  share  up  to 
32  USB  computers.  Flawless  compatibility 
with  SUNs,  MACs  and  PCs.  Supports  USB 
keyboards  and  mice  and  VGA  multiscan 
monitors.  Features:  Matrix  Control 
Software,  OSD,  RS232,  LCD,  and  1900x1200 
resolution. 


N&RTEL 

NETWORKS 


Nortel  Networks 
(800)  4nortel 
www.nortelnetworks.com/onenetwork 

Nortel  Networks  is  focused  on  transform¬ 
ing  how  the  world  communicates  and 
exchanges  information.  With  its  "One 
network.  A  world  of  choice."  enterprise 
strategy,  Nortel  Networks  prepares 
enterprises  for  the  future  by  helping  them 
engage  customers  and  deliver  end  cus¬ 
tomer  value.  As  a  global  company,  Nortel 
Networks  does  business  in  more  than 
150  countries. 


Precise  SRM 


Precise  SRM 
(800)  529-3453 
www.precise.com/solutions/storage 

Precise  Software’s  Precise  SRM  division, 
formerly  “WQuinn,”  is  the  recognized  leader 
in  real-time  storage  resource  management 
solutions.  Its  industry-leading  solutions 
provide  policy-based,  heterogeneous  SRM 
for  DAS,  SAN,  and  NAS  devices.  Over  4,000 
companies  in  50  countries  use  Precise  SRM 
solutions  to  control  storage  growth  and 
reduce  storage  TCO. 


"radware 


Radware,  Inc. 
(888)  234-5763 
www.radware.com 


When  downtime  is  not  an  option,  Radware 
solutions  bridge  between  application 
requirements  and  the  network  infrastruc¬ 
ture,  ensuring  the  best  service  at  every  crit¬ 
ical  point  including  servers,  firewalls,  route 
control  and  security.  Enabling  control,  avail¬ 
ability,  and  optimized  performance  across 
all  organizational  resources,  Radware  deliv¬ 
ers  end-to-end  application  certainty  —  from 
click  to  content. 
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The  Best  Issue 


TIPS,  Continued  from  page  87 

against  four  Adelphia  executives,  including  founder  John 
Regas  and  his  two  sons. 

F.ven  though  Adelphia  has  obtained  a  cash  infusion  that 
bodes  well  for  continued  operations  and  it  has  delivered 
uninterrupted, quality  service  to  MMHS  throughout  this 
period,  the  CLECs  troubles  have  given  Lubitz  pause.  He 
says  he  will  not  simply  renew  his  expired  Adelphia  con¬ 
tract,  but  is  investigating  all  options  for  leasing  critical 
WAN  fiber. “MMHS  can’t  cost-justify  laying  its  own  fiber, so 
is  evaluating  options  from  BellSouth  and  CLECs,  including 
Adelphia.  But  we’ve  learned  that  dealing  with  CLECs  can 
be  extremely  painful” Lubitz  says. 

fan  tract  wrangling 

If  you,  too.  are  feeling  the  pain,  under¬ 
standing  your  options  can  bring  relief. 

Leave  the  details  of  your  services 
contracts  to  legal  counsel,  but  get 
a  grasp  of  the  basics.  First,  know 
that  you  can’t  terminate  your 
contract  with  a  service 
provider  simply  because  it 
files  for  bankruptcy  —  even  if 
your  contract  explicitly  states 
that  you  can,  says  Hank 
Levine,  a  partner  with  Levine, 

Blaszak,  Block  &  Boothby  a 
Washington  law  firm  that  spe¬ 
cializes  in  user  telecom  con¬ 
tracts.  Such  statements,  called 
ipso  facto  clauses, “are  not  en-  ' 
forceable  in  the  United  States, 
period,”  he  says. 

As  soon  as  a  carrier  declares 
bankruptcy  financial  decisions  rest 
with  the  overseeing  bankruptcy 
court,  which  will  immediately  freeze 
contracts  into  place, says  Colleen  Boothby 
another  partner  with  the  firm.  Ending  a  con¬ 
tract  requires  petitioning  the  bankruptcy  court. 

You  won’t  find  the  court  sympathetic.  A  bankruptcy 
court’s  goal  is  to  protect  creditors  —  not  customers.  Most 
service  providers  in  bankruptcy  protection  have  neither 
turned  off  their  networks  nor  even  missed  uptime 
requirements  or  other  significant  technical  service  met- 
rics.They  are  not  in  breach  of  their  service-level  agree¬ 
ments  (SLA).  Rather, service  tends  to  deteriorate  first  in 
what  Levine  calls  the  “soft  aspects,”  such  as  responding 
quickly  to  your  phone  calls  or  fixing  a  billing  error.  In  the 
unlikely  circumstance  that  your  SLAs  spell  out  expected 
performance  in  soft  aspects,  your  lawyers  may  be  able  to 
use  failures  there  to  convince  a  bankruptcy  court  that 
your  carrier  breached  the  contract.  But  even  with  evi¬ 
dence  that  the  provider  has  missed  some  of  its  hard-and- 
fast  technical  SLAs,  the  court  will  not  likely  terminate  a 
source  of  revenue  like  your  monthly  checks. 

A  earner’s  bankruptcy  can  have  two  positives  for  cus¬ 
tomers,  Levine  says.  For  one,  operations  replace  stock 
price  as  the  company’s  primary  focus.  Now  is  a  good 
time  for  you  to  press  your  account  team  into  operational- 
related  promises,  perhaps  shoring  up  their  commitments 
to  soft  services  (even  if  such  promises  don’t  hold  the 
legal  weight  of  a  formal  SLA). 

Secondly  when  a  company  sheds  its  debt,  it  can  price 
serv  ices  aggressively  —  and  is  motivated  to  win  new  busi- 
ness  or  renegotiate  existing  contracts.This  is  an  excellent 
time  to  negotiate  extremely  favorable  prices,  maybe  even 
helping  you  fund  the  expense  of  a  second,  back-up  carrier. 

[.hack  gotsr  assignment 

Bankruptcy  proceedings  typically  take  a  year  to  18 
months  to  complete,  after  which  anything  can  happen  — 


the  company  might  emerge  and  continue  to  function,  or 
it  might  be  sold  in  entirety  or  in  pieces. 

Watch  for  news  of  a  potential  sale.  Such  a  sale  could 
affect  you  because  your  contract  could  be  among  the 
assets  sold  in  a  process  called  assignment.  While  your 
contract  might  include  a  clause  forbidding  assignment.it, 
too,  is  unenforceable,  Levine  says.  But, should  your  con¬ 
tract  be  assigned  to  a  carrier  unable  to  provide  all  speci¬ 
fied  services,  such  as  datacom  and  long-distance,  you 
might  have  legal  recourse,  he  adds. 

If  you  are  aware  of  a  potential  sale  and  are  concerned 
that  your  contract  might  wind  up  in  the  hands  of  a  carrier 
you  don’t  want, you’ll  need  to  get  your  lawyers  hopping 
right  away  They  might  be  able  to  get  your  opin¬ 
ions  heard  by  the  bankruptcy  court,  perhaps 
by  linking  up  with  other, similarly  con¬ 
cerned  users. 

When  it  comes  to  working  with 
bankrupt  carriers,  size  matters,  too. 
As  the  largest  corporate  bank¬ 
ruptcy  to  date  —  and  of  a  domi¬ 
nant  carrier  —  contract  issues 
with  WorldCom  are  far  more 
complex  than  they  are  with 
small  CLECs,  Boothby  says. 
For  instance,  even  if  you 
intend  to  stand  by  World¬ 
Com,  you  might  not  have  that 
option.  If  WorldCom  emerges 
from  bankruptcy  and  contin¬ 
ues  operations,  per  typical 
practice,  it  would  get  to  accept 
or  reject  existing  contracts,  no 
matter  their  terms.  No  one 
knows  how  much  time  customers 
would  have  to  move  should  their 
contracts  be  rejected.  Several  large 
WorldCom  customers  have  banded 
together  to  lobby  the  bankruptcy  court 
for  a  ban  on  contract  rejections  and  other 
issues.  Consider  pressing  your  legal  team  to  join 
them.  But  even  if  your  company  remains  apart,  the 
involvement  of  these  users  could  affect  how  the  courts 
treat  any  request  you  submit,  so  have  your  legal  col¬ 
leagues  keep  you  abreast  of  such  goings-on. 

WorldCom  also  might  want  to  insert  a  rejection-rights 
clause  into  any  new  agreement  you  make  at  this  juncture. 
Creditors  often  push  for  this  so  that  the  company  can  pre¬ 
serve  maximum  flexibility  Levine  says.  Make  sure  your 
lawyers  watch  for  such  a  clause.  If  WorldCom  won’t 
remove  it,  you  could  be  better  off  with  another  provider 
that  can  offer  competitive  rates  at  a  guaranteed  term. 

Owners  nr  lesser  s 

If  your  contract  expires,  or  you  have  the  legal  where¬ 
withal  to  end  it, your  next  challenge  is  finding  a  better 
replacement.This  obviously  won’t  be  easy  given  the  num¬ 
ber  of  troubled  providers  these  days.  One  consideration  is 
whether  to  align  with  a  facilities-based  provider  that  owns 
its  own  network  infrastructure  or  a  services-based  provider 
that  leases  capacity  from  multiple  carriers. The  classic 
belief  is  that  financially  stable  facilities-based  providers 
such  as  AT&T  are  the  safest  bet  for  a  long-term  contract. 
But  contracting  with  a  services-based  provider  for  WAN 
links  is  often  equally  safe,  and  in  some  instances  safer,  says 
Steven  Taylor,  president  of  Distributed  Networking  Assoc¬ 
iates  and  Network  World's  Packet  Evangelist  columnist.  In 
the  WAN,  a  services-based  provider  can  tap  into  many 
more  paths,  owned  by  multiple  carriers, than  a  facilities- 
based  provider  locked  into  its  own  infrastructure. 

Taylor  offers  as  an  example  Virtela  Communications, 
one  of  Network  World’s  2002  10  start-ups  to  watch  (see 
www.nwfusion.com,  DocFinder:  3025).Virtela  buys 


Internet  bandwidth  from  multiple  sources  and  moves  traf¬ 
fic  from  one  connection  to  another  if  performance  on  a 
particular  link  wanes  (see  related  story  page  68). 

As  long  as  the  services-based  carrier  can  offer  you  evi¬ 
dence  that  it  is  financially  well-heeled,  this  might  be  a 
way  to  get  the  performance  benefits  of  splitting  traffic 
among  multiple  providers  while  obtaining  the  financial 
benefits  of  a  volume  discount  with  one  carrier.  Of  course, 
many  services-based  providers  are  start-ups  that  don’t 
have  the  income  or  the  cash  reserves  that  the  nation's 
large  facilities-based  carriers  do, so  future  instability  is  a 
concern.  Should  you  take  this  route,  don’t  contract  for 
more  than  two  years  of  service,  and  be  sure  to  spell  out 
many  soft-aspect  SLAs. 

Splitting  the  traffic 

The  safest  bet  remains  dividing  services  among  two  or 
more  providers.  But  that’s  not  an  automatic  safety  net.  Cer¬ 
tain  other  precautions  are  wise,  says  Barry  Nance,  a  con¬ 
sultant,  a  Network  World  Test  Alliance  member  and  author 
of  books  such  as  Introduction  to  Networking. 

“For  maximum  reliability  ask  both  telecom  vendors  to 
give  you  a  detailed  description  of  the  physical  data  path 
each  link  uses.  If  both  paths  happen  to  occasionally  share 
physical  space  or  connections, such  as  between  your  site 
and  the  local  [central  office] ,  evaluate  your  risk  for  some 
thing  calamitous  happening  to  both  links,”  Nance  says. 

Because  cost  is  almost  everyone’s  issue  these  days, 
determine  which  links  are  critically  important,  and  con¬ 
tract  for  a  back-up  provider  for  only  those  links. Then, 
because  you  are  paying  for  both  links  anyway  “activating 
the  second  link  as  additional  bandwidth  and  splitting  the 
workload  across  both  links  is  a  natural  thing  to  do.  If 
both  links  are  continually  active, you  don’t  have  to  take 
any  steps  to  cause  failover  from  one  link  to  the  other 
when  problems  occur]’ he  adds. 

If  last  mile  or  remote  areas  are  your  most  worrisome  vul¬ 
nerabilities,  consider  fixed-broadband  wireless  such  as 
microwave  or  satellite,  suggests  John  Hatton,  a  telecom 
director  at  Burlington  Northern  and  Santa  Fe  Railway  Co. 
His  experience  using  fixed-broadband  wireless  spans  15 
years.  In  that  time,  he’s  seen  microwave  and  satellite  tech¬ 
nologies  improve  to  the  point  of  high  reliability 

“Depending  on  the  level  of  redundancy  you  want,  satel¬ 
lite  technology  [not  really  good  15  years  ago]  and  . . . 
microwave  are  certainly  worth  another  look,  especially 
for  remote  areas,”  he  says. 

MMHS’  Lubitz  agrees.  A  microwave  carrier  is  among  five 
providers  the  hospital  short-listed  as  it  researches  tele¬ 
com  options.  It  is  considering  the  carrier  for  secondary 
service  now  that  such  providers  claim  “five-nines”  reliabil¬ 
ity,  Lubitz  says. 

Any  of  the  various  flavors  of  wireless  links,  from  satellites 
to  line-of-sight  antennas,  can  provide  the  same  kind  of  net¬ 
work  interface  enterprise  users  are  accustomed  to  forT-1 
or  frame  relay,  Nance  says.  So  the  mechanics  of  setting  up 
such  connections  won’t  require  special  equipment  or 
training.  But  don’t  try  to  use  such  links  only  when  failures 
occur,  but  load-balance  between  them  so  “when  a  prob¬ 
lem  happens  in  just  one  link, you’ll  merely  suffer  a  lessen¬ 
ing  of  bandwidth,  not  an  outage,”  he  advises. 

One  final  tip:  Be  creative.Think  about  working  with 
peers  —  perhaps  other  members  of  a  user  group  or  an 
industry-specific  consortium  —  to  negotiate  prices  with 
a  carrier,  users  say. This  can  be  particularly  helpful  in  off¬ 
setting  a  loss  of  a  volume  discount  when  splitting  your 
business  among  providers.  Likewise,  Boothby  recom¬ 
mends,  consider  joining  a  telecom  regulatory  watchdog 
group  such  as  the  Ad  Hoc  Telecommunications  Users 
Committee,  which  helps  see  that  users  are  fairly  treated 
by  regulatory  agencies  over  pricing  and  other  issues. 

By  moving  quickly  but  prudently,  your  network  surely 
will  weather  this  telecom  meltdown.  ■ 
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western  telematic  incorporated 

Western  Telematic,  Inc. 

(949)  586-9950 
www.wti.com 

Western  Telematic,  Inc.  (WTI)  is  an  industry 
leader  in  designing,  manufacturing  and  mar¬ 
keting  of  data  connectivity  solutions.  WTI's 
current  product  offering  includes  the 
NetReach  line  of  remote  site  management 
hardware.  The  products  consist  of  cost- 
effective  terminal  server  alternatives,  Telnet 
and  dial-up  network  power  switches  and 
secure  modems  for  remote  dial-up  manage¬ 
ment.  In  1975  long  time  company  executive, 
David  Morrison,  took  over  as  President. 

Mr.  Morrison  continues  to  successfully 
guide  WTI  through  its  cutting-edge  commit¬ 
ment  to  research  and  development. 
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The  network  that  Powers  Wall  Street * 

SAVVIS 
(800)  SAW  I  SI 
www.savvis.net 

In  the  Midst  of  the  Telecom  Storm...  Is  your 
Network  Provider  a  Safe  Harbor?  SAVVIS 
is  the  financially  sound  choice  for  people 
who  demand  a  proactive  managed  IP  VPN 
and  managed  hosting  provider.  And,  SAVVIS 
has  one  of  the  strongest  balance  sheets  in 
the  industry.  Don’t  just  take  our  word  for  it. 
Visit  our  web  site  and  discover  what  our 
customers  say  about  working  with  SAVVIS. 
Visit  www.savvis.net/testimonials  or  call 
1-800-SAVVIS-1 
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ScriptLogic  Corporation 
ScriptLogic 

(866)  727-4785  /  (954)  861-2300 
www.scriptlogic.com 

ScriptLogic  Corporation  is  the  leader  in 
desktop  administration  software  for  Micro¬ 
soft  Windows-based  networks.  ScriptLogic, 
its  award-winning,  patent-pending,  flagship 
product  is  an  innovative,  multi-functional 
solution  that  eliminates  redundant  tasks, 
repeated  trips  to  each  desktop  maintaining 
multiple  batch  files  and  many  other  time- 
consuming  activities-leaving  IT  staff  free 
for  more  critical  issues. 


Raritan  Computer,  Inc. 

Paragon  UMT2161 
(732)  764-8886 
www.raritan.com 

Raritan's  new  Paragon  UMT2161  is  a  2  user, 
16  port  Matrix  Switching  Unit  specifically 
designed  to  bring  Paragon  Power  to  small 
to  mid-sized  data  centers  and  server  rooms. 
Paragon  UMT2161  has  all  the  benefits  of 
the  Paragon  family  of  enterprise-class  KVM 
solutions  including  Cat5  UTP-based 
enhanced  cable  management,  extended 
access  distances,  modular  architecture  and 
easy  expandability  —  all  at  an  entry-level 
price  of  $2,000. 


Rose  Electronics 
RackView  “  rack  mountable  KVM 
console  drawer 

(800)  333-9343  /  (281)  933-7673 
www.rose.com 

The  RackView™  offers  the  most  efficient 
way  to  control  server  rooms  or  multiple 
computers  to  reduce  rack  space  consump¬ 
tion.  The  RackView™  is  a  1U  or  2U  rack 
mountable  KVM  console  drawer  with 
optional  integrated  KVM  switch.  This  easy- 
glide  KVM  console  drawer  contains  a  high 
resolution  LCD  flat  monitor,  a  tactile  key¬ 
board,  and  a  trackball. 


Wave  Wireless  Networking 

SPEEDLAN  9000 

(800)  721-9283  /  (941)  907-2300 
www.wavewireless.com 

Stop  throwing  money  away  on  recurring 
leased  line  charges!  SPEEDLAN  9000  gives 
you  the  power  to  deploy  a  star,  mesh  or  a 
point-to-point  wireless  building-to-building 
network  as  little  as  one  afternoon.  SPEED¬ 
LAN  mesh  technology  even  helps  to  route 
signals  around  obstructions  like  hills,  trees 
or  larger  buildings.  The  platform  features 
an  1 1  Mb/s  radio  operating  at  2.4  GHz,  NAT 
and  DHCP  server/client,  RIP  2,  AES  encryp¬ 
tion,  and  includes  GUI  based  centralized 
management  software. 
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VBricK  Systems 
VBSTAR 

(203)  265-0044 
www.vbrick.com 

VBSTAR  is  the  first  product  that  combines 
digital  television  recording,  MPEG  stream¬ 
ing,  advanced  networking,  high  perform¬ 
ance  video  storage,  and  an  integral  MPEG-2 
video  server  in  one  low  cost,  compact,  high 
performance  package.  VBSTAR  allows 
users  to  deliver  DVD  quality  video  any¬ 
where,  anytime,  over  any  network  for 
education,  advertising,  and  surveillance. 


Whale 

Communications 


Whale  Communications 
(201)  947-9177 
www.whalecommunications.com 

e-Gap  Remote  Access  Appliance,  the 
leading  SSL  VPN,  enables  organizations 
to  provide  employees  with  browser-based 
access  to  corporate  applications  such  as 
e-Mail,  CRM,  HR,  and  files  without  jeopard¬ 
izing  security.  Time  tested  in  large-scale 
production  environments  world-wide,  e-Gap 
RA  frees  employees  from  being  bound  to  a 
particular  location,  laptop,  or  device.  e-Gap 
Remote  Access  is  the  only  remote  access 
product  to  incorporate  military-grade  Air 
Gap  and  positive-logic  filtering  technology, 
making  it  the  most  secure  SSL  VPN  on  the 
market  today. 


Websense 

Websense  Enterprise 

(800)  723-1166  /  (858)  320-8000 

www.websense.com 

Websense  Enterprise  is  the  leading  employ¬ 
ee  Internet  management  (EIM)  solution, 
used  by  more  than  17,800  organizations 
worldwide,  including  282  of  the  Fortune  500. 
As  a  server-based  software  solution, 
Websense  allows  you  to  transparently  ana¬ 
lyze,  manage  and  report  on  traffic  flowing 
from  your  internal  networks  to  the  Internet. 
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WORLDCOM, 

WorldCom,  Inc. 

(888)  WCOM  NOW 
www.worldcom.com 

WorldCom  is  a  preeminent  communications 
provider  and  owner  of  the  world’s  most 
expansive*  IP  network.  WorldCom  offers 
innovative  business  solutions  from  the 
security  of  public  or  private  VPNs,  to  the 
simplicity  of  The  Business  Connection,  a 
suite  of  local,  long  distance  and  Internet 
services  available  for  one  low  monthly  price. 
*Based  on  Global  PoPs. 


All  efforts  have  been  made  to  make  this  listing  as  complete  and  accurate  as  possible.  Network  Wo 


XO  Communications,  Inc. 

(866)  963-9696 
www.xo.com 

XO  Communications  is  a  leading  broadband 
communications  service  provider  offering 
a  complete  set  of  communications  services, 
including:  local  and  long  distance  voice, 
Internet  access,  Virtual  Private  Networking 
(VPN),  Ethernet,  Wavelength,  Web  Hosting 
and  Integrated  voice  and  data  services. 

XO  has  assembled  an  unrivaled  set  of 
facilities-based  broadband  networks  and 
Tier  One  Internet  peering  relationships  in 
the  United  States.  XO  currently  offers 
facilities-based  broadband  communications 
services  in  65  markets  throughout  the 
United  States. 


If  your  year  is  progressing  like  it  is  for  other  network 
executives,  you  are  shorthanded  but  still  rolling  out  net¬ 
work  upgrades  and  major  new  applications.  Traffic  on 
your  WAN  is  growing  exponentially  while  your  primary 
service  provider  is  mired  in  financial  scandals.  You’ve 
smoothed  over  the  usual  number  of  “us  vs.  them”  IT 
skirmishes  but  also  must  deal  with  general  fears  about 
the  economy.  You  have  all  the  makings  of  a  stressed-out 
workforce. 

But  it  doesn’t  have  to  be  that  way.  With  the  right 
approach  and  execution,  network  executives  —  and  in 
turn  their  staffs  —  can  stay  cool  as  cucumbers  and  get 
the  job  done  in  spite  of  today’s  pressures.  Here  are  a  few 
expert  suggestions  on  how  to  do  just  that: 


things  to  do  immediately  and  the  other  with  what  to 
accomplish  later. 

Items  for  the  do-right-away  list  should  include  any  that 
would  reduce  options  later  in  a  big  way  if  not  taken  care 
of  immediately,  Slaikeu  explains.  Deciding  on  how  to  fix 
that  broken  Gigabit  Ethernet  switch  would  be  a  priority, 
something  to  be  addressed  before  it  reduces  networking 
options. 


■  Simplify.  Turn  a  big  problem  or  overwhelming  situa¬ 
tion  into  a  manageable  one  by  approaching  it  incremen¬ 
tally  as  a  series  of  small  solvable  issues,  suggests  Ryan 
Hunter,  senior  technology  consultant  in  Watson  Wyatt 
Worldwide’s  eHR  practice  in  Minneapolis. 

Don’t  overlook  simplifying  the  network  and  its  equip¬ 
ment  or  your  approach  to  it 
flM?  either.  For  example,  don't 


■  Frequently  align  IT  strategies 
with  corporate  goals.  That’s  the 
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bottom  line,  says  Lynn  Caddell, 

CIO  of  36,000-employee  trans¬ 
portation  behemoth  Yellow 
Corp.,  in  Overland  Park,  Kan. 

Forging  a  partnership  between  IT  and  the  business  gies  in  place,  staff  doesn’t  need  as  much  training  either, 

side,  with  shared  goals  and  shared  pain,  can  reduce  he  adds,  because  if  one  thing  breaks,  all  the  machines 

stress  levels  by  cutting  down  the  finger-pointing,  adds  will  have  the  same  attributes. 

Walt  Thomas,  CIO  of  Computer  Associates.  He  meets 

with  senior  corporate  executives  at  least  once  per  quar-  ■  Adjust  yOUr  management  Style.  Because  corporate  sur- 
ter  to  discuss  their  plans  and  how  IT  can  satisfy  their  vivability  is  an  issue  today,  employees  tend  to  think  of 

„  needs.  As  a  result,  he  says,  senior  executives  are  set-  their  jobs  as  at  risk,  too.  Network  department  heads 

ting  the  priorities  and  therefore  less  likely  to  rail  need  to  adjust  their  style  accordingly  to  reduce  that 

—  against  technology  implementations.  stress  on  the  staff,  says  Valerie  O'Connell,  managing 


* 


-H  fli  !  B I  f  H  Sm 


think  of  10,000  computers 
linked  via  your  network,  but 
of  10  types  of  machines 

replicated  1,000  times,  Hunter  says.  With  fewer  technolo- 


s  This  kind  of  regular  prioritization  with  the  business 
leaders  not  only  reduces  stress,  but  also  helps  IT  remain 
focused  and  productive,  Caddell  adds. 

■  Focus  on  what  is  important  to  corporate  survivability,  in 

stressful  times,  the  tendency  is  to  try  to  do  everything 
at  once.  Network  professionals  often  waste  their  ener¬ 
gies  trying  to  integrate  the  newest  technologies  or  find 
vulnerabilities  across  the  entire  network.  Your  efforts 
would  be  better  spent  identifying  the  corporate  assets 
that  are  key  to  survivability,  then  concentrating  on  tak¬ 
ing  care  of  those,  says  Larry  Rogers,  senior  member  of 
the  technical  staff  at  Carnegie  Mellon  University’s 
Software  Engineering  Institute,  a  federally  funded 
research  and  development  center  in  Pittsburgh.  Rogers 
teaches  a  course  there  called  Survivability:  A  New 
Network  Perspective. 

For  network  professionals,  that  can  mean  adjusting 
your  thinking  and  priorities,  adds  Karl  Slaikeu,  a  clinical 
psychologist,  president  of  Chorda  Conflict  Management 
and  author  of  Crisis  Intervention:  A  Handbook  for  Practice 
and  Research.  He  suggests  making  two  lists  —  one  with 


director  of  enterprise  management  for  Aberdeen  Group. 

Combat  employee  fears  by  being  more  visible  and  open 
about  the  decisions  you  make,  says  Chris  Edgelow,  presi¬ 
dent  of  Sundance  Consulting.  Leaders  must  get  out  of 
their  offices  and  create  opportunities  to  talk  with  people 
on  a  regular  basis.  Hosting  a  “Lunch  with  the  Boss”  once 
a  week  in  the  cafeteria  —  buying  dessert  for  anyone  who 
shows  up  —  is  one  way  to  be  out  there,  listening  to  what 

people  have  to  say,  answering  questions  and  addressing 

.  .  .  *  .  -  ■ 


issues  and  concerns,  he  adds. 


i. 


And  don’t  forget  to  smile,  says  CA’s  Thomas,  a  30-year 
IT  veteran  who  takes  the  business’  ups  and  downs-in'  _ '  ’ 

stride.  He’s  smiling  a  lot  these  days,  he  says,  although,  T 
not  always  because  he’s  happy  with  what’s  going  on.  “At  . 
the  end  of  the  day,  a  smile  goes  a  Jong-  way-to^ard" 
[brightening]  your  attitude.  The  objective  is  not  to  dtjye'; y’. 
people  to  work,  but  to  get  them  to  [want  to]  workh^*^ 
for  you  and  to  get  them  to  care  about  the  comj«UJy-.ahdv  ^ 
their  own  jobs.” 
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The  Hub  of  the  Network  Buy 


Paul  L.  Greene 

Director  of  Information  Security 

NeuStar,  Inc. 
www.neustar.biz 

NeuStar  operates  the  registry  of  all 
North  American  telephone  numbers 
the  database  that  North  American 
carriers  use  to  route  billions  of 
telephone  calls  daily  and  runs  both 
the  .us  and  .biz  registries. 


I  Meu  Stars  unique  service  and  position  in  the  telecommunications  industry  make  it  a  target  of  attacks 
We  need  rock  solid'  security  and  a  vendor  who  understands  what  that  means.  CyberGuard  was  the  first 
in  the  world  to  achieve  EAL4  certification  for  its  firewall  appliances:  that  really  impressed  us 

“We  knew  they  would  be  capable  of  providing  the  level  of  sophisticated  security  support  we  needed  and 
we  have  not  been  disappointed:  their  technical  support  team  knows  security  and  CyberGuard  s  ability  to 
deliver  on  everything  they  promised  enabled  us  to  meet  our  tight  deadline  for  deliverables.  Today,  we  have 
CyberGuard’s  firewall  appliances  in  three  countries. 

7  have  an  experienced  team ,  but  on  more  than  one  occasion  I  had  to  enlist  the  help  of  a  junior  engineer 
to  install  the  firewall.  I  was  able  to  talk  them  through  the  process  over  the  phone.  I’m  happy  to  repoit  that 
those  systems  have  been  functioning  in  a  production  environment  for  over  one  year  without  a  hitch.  And 
CyberGuard  rocks  the  competition  in  the  performance  impact  category " 


CyberGuard  s  security  solutions  are  found  in  Fortune  1000  companies  and  governments  worldwide  CyberGuard’s 
award-winning  premium  firewall/VPN  appliances  maintain  complete  separation  of  network  traffic  from  system 
components. 


Phone:  954.958.3878 

e-mail:  info@cyberguard.com 

For  white  papers  on  Rock  Solid  Security  go  to 

rocksolid.cyberguard.com 

Copyright  2002  CyberGuard  Corporation.  Ail  rights  reserved. 


DEFEND  YOUR  DOMAIN 


SilentRunner  is  the  lens  into 
your  network  providing  the 
only  network  security  solution  few  , 
that  applies  state-of-the-art  B 
analysis,  correlation  and 
3-D  visualization  software  to  network  security 
analysis  -  exposing  threats  and  abuses 
that  just  can’t  be  seen  with  standard 
security  technologies. 


For  your  free  Technical  White  Paper, 
visit  www.silentrunner.com 


or  call  800.842.2366  today. 


SilentRunner 

A  Raytheon  Company 
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•  2x2  Connectivity  with  dual  Gigabit  Ethernet  ports 
supporting  NDMP  or  iSCSI  and  dual  SCSI  ports 

•  Multiple-protocol  support  enables  OEMs  to  serve 
multiple  markets  with  the  same  product 

•  4U  cPCl  board  for  direct  integration  into 
custom  OEM  configurations 

•  New,  high-performance  architecture  to  support 

next-generation  tape  drives 

.. 

•  Advanced  diagnostics  to  significantly  enhance 
.  #feld  support 
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Stop  by  Comdex  Meeting  Room  N240 
for  the  World  Premier  Showing  of 
the  New  ATTO  iPBridge  3500C/R/DM 

t  Power  Behind  the  Stor 


lUHnro 


[TTJJm[Tn 

if  ii 

rfirTr 

;  J  1  j  | 

Jn 

linTmiTi]  $  1 

irra 

iiiiiii 

■  Connects  to  standalone  computers  or  any  KVM  switch 

■  High  quality  16-bit  video  at  up  to  1280x1024  resolution 

*  Easy  to  install,  give  it  an  IP  address  and  run  the  Viewer 
program,  no  user  license  required 

«  Encrypted  communication  produces  highly  secure  operation 

*  Scaling  and  scrolling  features  for  maximum  flexibility 
■>  Single  mouse  cursor  simplifies  user  interface 

•*  See  :  ;ur  servers  from  one  screen  with  quad  screen  mode 

«  Lifetime  free  flash  upgrades 
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ew  kid  on  the  block? 


The  GB-1000  Firewall/VPN  appliance  is  powered 
by  the  GNAT  Box  System  software  -  the  original, 
small  footprint,  high  performance  firewall  system  first 
introduced  in  1996.  The  GB-1000  is  deployed 
worldwide  by  organizations  that  desire  rock-solid 
operation  and  the  best  price/performance  ratio  on  the 
market  today. 


The  GB-1000  has  many  standard  features  including 
IPSec  VPN,  DNS  server,  failover  routing  and  DHCP 
services.  Optional  features  such  as  high  availability  and 
24x7  support  are  also  available. 


UltraLink 


Rose  Electronics 
10707  Stancliff  Road 
Houston,  TX  77099 


USA  toll  free 
ROSE  US 
ROSE  Europe 
ROSE  Asia 


800  333  9343 
281  933  7673 
+44  (0)  1264  850574 
+617  3427  5353 


WWW.ROSE.COM 


vV'-'. 


Firewall 


Global  Technology  Associates,  Inc. 

1  - 800-775 -4GTA  •  www.gta.com  •  info@gta.com 


UltraLink  sets  a  new  standard  in  remote  management  of  server  room 
environments.  It  saves  you  money  by  allowing  you  to  centralize  your  IT 
resources.  Since  it  does  not  depend  upon  software  loaded  on  your 
computers,  it  deploys  easily  and  works  on  any  operating  system,  such 
as  Windows,  Linux,  Solaris,  Unix,  or  OSX. 

The  UltraLink  digitizes  the  remote  computer's  video.  It  then  scales, 
compresses,  encrypts,  and  packetizes  it  into  the  TCP/IP  protocol.  At 
your  PC  the  free  Viewer  application  receives  and  displays  the  video  and 
sends  back  keyboard  and  mouse  data.  This  process  allow  you  to  access 
remote  computers  from  anywhere. 

Rose  is  a  leading  manufacturer  of  switching,  extension,  and  access 
products.  As  a  KVM  industry  pioneer,  Rose  is  known  for  its  technically 
superior  and  price  competitive  products. 

Join  the  ranks  of  many  successful  companies  using  UltraLink,  call  Rose 
to  learn  more  about  KVM  Access  over  IP  as  well  as  KVM  Switches  and 
Extenders. 


Visit  our  web  site,  email  or  call  for 
more  information. 


Years:  10 

GTA  has  10  years  experience  in  developing  quality  software.  Since  1994,  GTA  has  been 
producing  solid,  dependable,  ICSA  certified  firewalls,  with  a  powerful  feature  set  at  an 
affordable  price. 

NICs:  4+ 

The  GB-1000  standard  configuration  includes  4  built-in  10/100  NICs.  Expansion 
options  allow  the  addition  of  up  to  4  more  NICs,  including  Gigabit.  Each  NIC  is  fully 
addressable,  allowing  flexible  configuration. 

Users:  00 

The  GB-1000  has  an  unlimited  user  license  and  supports  128,000  concurrent 
connections.  Our  powerful  dynamic  network  address  translation  technology  and 
stateful  packet  inspection  engine  provide  all  users  with  transparent  Internet  access  and 
proven  network  security. 


CERTIFIED 
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ELECTRONICS 


Eliminate  Dangerous 
Hot  Spots  in  Your  Racks 

Introducing  APC's  New  NetworkAIR™  RM  Air  Distribution  Unit 


Benefits  of  APC's  Air  Distribution  Unit: 


As  heat  densities  continue  to  grow  at  an  alarming  rate,  the  traditional 
methods  of  distributing  air  in  a  computer  room  aren't  adequate  to  deliver 
the  necessary  airflow  required  to  cool  today's  data  center  environments. 


APC  presents  the  NetworkAIFT  RM  Air  Distribution  Unit,  a  compact 
2U  rack-mounted  fan  unit  that  works  with  an  existing  precision  air 
conditioning  system  to  deliver  cool  air  to  the  equipment  contained  in 
a  rack  enclosure.  An  air  curtain  is  evenly  distributed  to  the  front  of  the 
enclosure  which  provides  consistent  temperatures  from  top  to  bottom. 


Visit  www.apc.com  to  see  APC's  complete  line  of  award-winning  power 
and  cooling  solutions. 


•  Increases  airflow  to  rack  equipment 

•  Works  in  both  raised  floor  and  non-raised  floor  environments 

•  Compact  2U  design 

•  Minimizes  air  mixing 

•  Helps  maintain  optimal  environment  for  high  reliability 

•  Improves  air  quality  through  30%  efficient  air  filtration 

(as  per  the  ASHRAE  52.1-1992  standard) 

•  Evenly  distributes  cool  air,  improving  air  circulation 
inside  the  rack 

•  Ensures  maximum  uptime  with  redundant,  dual,  independ¬ 
ently  controlled  blower  fans  and  A-B  power  input  feeds 

•  Fits  APC's  NetShelter®  VX  enclosure  or  other  19" 
EIA-310-D  enclosures  with  removable  bottom  plates 


The  compact  (2U)  Air 
Distribution  Unit  installs 
at  the  bottom  of  the  enclosure  and  sup¬ 
plies  an  air  curtain  to  the  intakes  of  equip¬ 
ment  located  within  the  enclosure,  evenly 
distributing  cool  conditioned  air  throughout. 


<B 


Legendary  Reliability1 


Enter  to  WIN  a  FREE  NetworkAIR™  RM  Air  Distribution  Unit 

Visit  APC'sWeb  site  at:  http://pmm0.apc.com  Enter  Key  Code  h431y  Call  888-289-APCC  x6489  Fax  401-788-2797 


©2002  American  Power  Conversion  Corporation.  All  Trademarks  are  the  property  of  their  owners.  NA2A2BF-USa 
E-mail:  esupport@apcc.com  •  132  Fairgrounds  Road,  West  Kingston,  Rl  02892  USA 


Them  is  A  Better  Way  To  Troubleshoot  &  Manage  Your  Network 


Observer 
* 995 


Expert 
Observer 
$ 2895 


Observer 
Suite 
$ 3995 


Observer® — Quickly  identifies  network 
trouble  spots  and  costs  thousands  less  than 
expensive  hardware-based  analyzers. 
Observer  provides  metrics,  capture,  and 
trending  for  both  shared  and  switched 
environments. 

•  Full  packet  capture  and  decode  for  over 
500  protocols,  including  TCP/IP  (v4  &  v6), 
NetBIOS/NetBEUI,  XolP,  SNA,  SQL,  IPX/SPX, 
Appletalk  and  many,  many  more! 

•  Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  an  entire  switch  or 
capture/statistics  from  any  port(s) 

•  Long-term  network  trending  collects 
statistical  data  for  days,  weeks,  months, 
even  years 

•  Real-time  statistics  include  Top  Talkers, 
Bandwidth,  Protocol  Statistics,  and 
Efficiency  History 

•  Ethernet  (10/100/Gigabit),  Token  Ring, 
FDDI,  and  Wireless  802. 1 1 — no  need  to 
purchase  separate  tools 


•  Windows?  98/Me/NT/2000/XP  compatible 

•  Over  4,000  frame  types  recognized 

Expert  Observer — Identifies  problems  and 
provides  Expert  information  in  plain  English. 

Includes  all  of  the  features  of  Observer  plus 
real-time  and  post-capture  expert  event 
identification  and  analysis — new  SQL  and 
Frame  Relay  experts  add  to  the  many  other 
protocols  covered,  time  synchronization 
technology,  and  modeling  of  network  traffic. 

Observer  Suite — The  ultimate  tool  for 
the  most  demanding  power  user. 

Provides  a  full  complement  of  tools  that 
includes  all  of  the  features  of  Expert 
Observer  plus  SNMP  management,  RMON 
console/Probe  and  Web  reporting.  Includes 
one  remote  Probe. 

If  you  have  any  network  problems,  find 
out  the  cause  with  Observer,  Expert 
Observer,  or  Observer  Suite. 


Call  800-526-7919  or  visit  us  online  for  a  full-featured  evaluation: 

www.NETWORKINSTRUMENTS.com 

US  (952)  932-9899  •  Fax  (952)  932-9545  •  UK  4  Europe  +44  (0)  1959  569880  •  Fax  +44  (0)  1959  569881 


NETWORK 

INSTRUMENTS 


©2002  Network  Instruments,  LLC.  Observer,  “Network  Instruments"  and  the  “N  with  a  dot”  logo  are  registered  trademarks  of  Network  Instruments,  LLC. 
All  other  trademarks  are  property  of  their  respective  owners. 


Remote  Console  Management  Solutions 


Access  Serial  Console  Ports...  from  Anywhere! 


OUT-OF-BAND  +  TELNET 


■  Multi-Session  Telnet 

■  8,  16  or  32  Port  Models 

■  Non-Connect  Port  Buffering 

■  AC  and  -48VDC  Power  Options 


OUT-OF-BAND  +  MODEM 


■  Internal  33.6  Kbps  Modem 

■  Seven  DB-9  Serial  Ports 

■  Any-to-Any  Port  Switching 

■  Co-Location  Password  Features 


OUT-OF-BAND 


■  4,  8  or  16  Port  Models 

■  Port  Specific  Passwords 

■  Safe  “Break”  Features 

■  Datarate/Flow  Control  Conversion 


WTI's  family  of  remote  site  management  products  allows  network  administrators  to  manage  network  elements  located  anywhere.  WTI  designs  and  manufactures  in- 
band  and  out-of-band  console  and  terminal  switches,  remote  reboot  and  power  management  solutions,  rack  mounted  modems  and  automated  A/B  Fallback  Switches. 


www.wti.com 


Features  included  in  all  Console  Switches 


(800)  854-7226 


western  telematic  incorporated 

S  Sterling  •  Irvine  •  California  92618-2517 


Keeping  the  Net.. .Working! 


READY 


uuess  wrqt  ranoo!  uses 


"The  Cytlades-TS  Series  of  Console  Access  Servers  provides  the  highest  port  density  and  security 
at  a  very  competitive  price.  By  using  Linux  as  the  embedded  OS,  it  offers  the  flexibility 
required  to  manage  our  dynamic  environment.  The  Cydades-TS  is  a  key  element  to  help 
US  keep  our  servers  up  and  running."  -  Pete  Kumler,  Manager  of  Site  Operations,  Yahoo!  Inc. 


Cydades-TS  Series 

Console  Access  Server 


1/4/8/16/32/48  RS-232  p 
First  Linux-based  Termini 


pace 
arket 


IP  Filtering,  RADIUS,  and  Secure 
Linux,  FreeBSD,  Sun,  HR 


lit>  it/ilnlmJCT'l/'sdh  (Sunj 
Off-lias  dtiiii  buna 


Request  for  your  FREE  CAS  booklet  at  www.cydadeu^r'  ^ 


THE  LEADER  IN 
LINUX 

CONNECTIVITY 


www.cyclades.com/nw 


1-888-CYCLADES  1-888-292-5233 
510-770-9727 
sales@cyclades.com 
Fremont,  CA 


mm  wm 


CYCLKDES 


©2002  Cyclades  Corporation.  All  rights  reserved.  All  other  trademarks  and  product  images  are  property  of  thier  respective  owners.  Product  information  subject  to  change  without  notice. 


dtSearch 


Instantly  Search 
Gigabytes  of  Text 


dtSearch 


dtSearch 


'Industrial-strength.., 
Superb"-*  Magazine 


♦  Search  across  networks,  intranets,  and  web  sites 


♦  Publish  large  document  collections  to  web  or  CD/DVD 


dtSearch 


'Industrial-strength... 
Superb"-*  Magazine 


Superb ...  a  multitude 
of  high-end  features" 

PC  Magazine 

Very  powerful ...  a 
staggering  number  of 
ways  to  search" 
Windows  Magazine 

Tremendously  powerful 
and  capable" 

Visual  Developer 


Intuitive  and  austere 
a  superb  search  tool" 
PC  World 


dtSearch 


A  powerful  text  mining 
engine ...  effective 
because  of  the  level  of 
intelligence  it  displays" 

PC  A! 


'Industrial-strength... 
superb"-*  Magazine 


dtSearch 


Searches  at  blazing  speeds 
Computer  Reseller  News 
Test  Center 


"Industrial-strength... 
Superb"*  Magazine 


Enterprise  features  ^ 

♦  over  two  dozen  indexed,  unindexed,  fielded  and  full-text  search  options  ^ 

♦highlights  hits  in  HTML  and  PDF  while  displaying  embedded  links, 
formatting  and  RflEliTH 

♦  converts  other  file  types— word  processor,  database,  spreadsheet, 
email,  ZIP,  XML,  Unicode,  etc.— to  HTML  for  display  with  highlighted  hits 

♦  developer  products  have  easy  wizard-basd  setup;  optional  API 


dtSearch 


'Industrial-strength  ... 
superb"-*:  Magazine 


'Industrial-strength... 
superb"-*  Magazine 


&£  www.dtsearch.com  for 

♦  developer  case  studies 

♦  free  30-day  evaluations 


1-8G0-IT-FINDS 

sales@dtsearch.com 


server, 


RUMish 


♦  included 
:*with  all 
products 


The  Smart  Choice  for 
Text  Retrieval®  since  1991 


Network 

♦  from  $800 


“POWER 
RESTORED ... 
Everything  is  Okay  ” 
—THE  IMS-4000 


On  the  back  nine 
John  knows 
his  servers  are 
safe  and  secure. 


4k  •  jpF 

iv  ww.in%-4000.  cffiri 


Get  More  Computers  in  Less  Space 

in  10  Days  or  Less 


Now  you  can  stack  computers  3  levels  up  to  7  feet 
high.  With  cable  channels  at  each  level. 

We’ll  design  maximum  flexibility  into  your  available 
space.  Tell  us  what  space  and  what  equipment, 
and  we’ll  give  you  a  3-D  PLAN  AT  NO  CHARGE! 
Choose  the  award-winning  ISO  9001  system  from 
Europe  or  a  typical  North  American  workhorse. 

You  can  receive  your  order  in 
5-7  business  days. 

THE  SALIX  GROUP  •  1-800-668-9319  e 


G.S.A.  GS29F269H 

I.S.O.  9001  CERTIFIED 


.  201  •  www.salixgroup.com 
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Ultra  Thin  1  U  Cabinet  Console 

An  Integrated  Keyboard,  Monitor  and  Touchpad  Solution 


Key  Features 

•  Kackmounts  in  only  III  of  cabinet  space 

•  Fold  Down  15"  TFT  LCD  Monitor 

•  Built-In  Touch  Pad  Mouse  &  Numeric  Key  Pad 

•  KVM  Modules  can  be  integrated  in  the 
same  1U  space 

•  Locking  Mechanism  secures  when  in  use 

•fir*  SO  people  will  rtinvt  •  i-thui 


To  find  out  more  about  StarTech.com’s  complete 
Server  Room  solutions  including  the  1U  Cabinet 
Console,  and  to  get  your  FREE  T-SHIRT!” 
visit  www.startech.com/NW  112 

Contact  StarTech.com  by  phone  at: 
1-866-STARTECH  [1-866-782-7832] 
or  online  at  www.startech.com 

StarTedi.com 


Console  Ports  Over  Telnet! 


Access  Network  Serial  Console  Ports . 


Froo^^i^fwhere! 


Ethernet  Interlace 


Ports 


23*  Rack 
Mounted 


✓ 

✓ 

✓ 

✓ 

✓ 

✓ 


Sixteen  (16)  RS232  DB9  Serial  Ports 
lOBase-T  Ethernet  Port 


TCP/IP  Security  Features 
Port-Specific  Password  Protection 
Co-location  Features 
AC  and  48V  DC  Powered  Models 


AC  or 
DC  Power 


The  CMS-16  Console  Management  Switch  provides  secure, 

in-band  and/or  out-of-band  access  to  RS232  console  ports  and  maintenance  ports  on  UNIX 
servers,  routers,  and  other  network  equipment,  System  administrators  can  access  remote  devices 
in  order  to  change  configuration  parameters,  connect  users  to  restricted  ports,  collect  buffered 
data,  and  perform  a  variety  of  other  control  related  functions. 


[make 


(800)  854-7226  •  www.wti.com 

5  Sterling  •  Irvine,  CA  92618  •  Fax:  (949)  583-9514 


western  telematic  incorporated 


YOUR  JOB  JUST  COT  EASIER! 

Sensaphone  IMS-4000  is  the  premier  scalable  infrastructure  monitoring  system  by  Phonetics,  Inc. 

The  IMS-4000  allows  you  to  MONITOR  critical  IP  devices  and  environmental  conditions  in  real  time. 

It  will  NOTIFY  you  instantly  via  voice,  pager,  e-mail,  SNMP,  or  fax  messages. 

With  the  IMS-4000  you  can  CONTROL  power  to  your  equipment  with  your  telephone,  or  automatically. 
With  IMS-4000  you  can  sleep  at  night,  because  it's  on  guard.  .  .  watching  your  world. 


IMS-4000  GIVES  YOU... 

•  Timely  information  about  events 

•  Early  notification  of  computer  trouble 

•  Inexpensive  alternative  to  additional  staffing 

•  Proven  technology  and  performance 

•  Accountability  through  data  collection 

•  Reduced  downtime  through  increased 
supervision  and  fault  notification 

SENSAPHONE* 


Find  out  why  IT 
professionals  just  like  you 
are  excited  about  the  IMS- 
4000. 

See  it  online  at: 
www.ims-4000.com 
or  call  Toll-free 

1  877  894  2120 


IMB-4DQD’ 


SENSAPHONE,  INC.  901  Tryens  Road  •  Aston,  PA  19014 


Sensaphone  and  IMS-4000  are  trademarks  of  Phonetics,  Inc. 


www.salixgroup.com 

COMPUTER 

SECURITY 


it. 


Be  careful  out  there ' 


Custom  fire  “rooms” 
and  “vaults”  available 


DATA  SAFE 


Store  diskettes,  tapes  and  cartridges  - 
in  a  DATA  SAFE 

Store  paper  documents  and  computer 
media  in  the  new  mixed  media  safes 
and  files 


MIXED 
MEDIA  FILE 

For  paper  and 
computer  media 


Both  units  protect  valuable  records 
from  fire,  water,  smoke,  humidity, 
sunlight,  vandalism  and  theft 

Units  are  available  in  various  sizes 


THE  SALIX  GROUP  1-800-668-9319  ext.  201 
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What  does  the  Cabinet  Console  Do? 


StarTech. corn’s  1U  cabinet  is  a  unique  product  designed  for 
server  cabinets  where  space  is  at  a  premium.  It  combines  a 
15.1"  TFT  monitor  display,  keyboard  and  touchpad  in  one 
unit  that  requires  only  1U  of  cabinet  space 


The  1U  drawer  pulls  out  and  the  display  folds  up  like  a 
notebook  computer  for  comfortable  operation. 

When  not  in  use,  the  display  folds  down  and 
pushes  into  the  cabinet,  requiring  only  1U  of  space. 


Works  with  virtually  any  KVM  switch  for  full  integration  into  your  existing 
equipment,  or  optional  KVM  switch  modules  can  be  added  behind  the  cabinet 
console  in  the  same  1 U,  without  taking  up  any  more  precious  cabinet  space. 

StarTedLcomf 


NWW11/02 


Request  more  information 
and  receive  a  FREE 
Ace  Techman  T-Shirt  at: 

‘first  50  requests  will  receive  a  t-shirt 


www.startech.com/NW1 1 2 


Reading  someone  else’s 
copy  of  Network  World? 

Apply  for  your  own 
Free  subscription  today. 


subscribenw.com/  b02 

Apply  for  your 

free 

subscription  today! 

(A  $255  value  -  yours  free) 


i/  e  m  &  n 

COMPLETE  KVM  CONTROL  VIA  TCP/IP 

mum 


CONTROL  KEYBOARD  VIDEO  AND  MOUSE  REGARDLESS  OF  LOCATION 

With  the  Kaveman  networking  device,  you  can  remotely  control  servers,  either  over 
the  Internet  or  a  local  network,  down  to  the  BIOS  level. 


ACCESS  SERVERS  USING  A  WEB  BROWSER  OR  VNC 

All  you  need  to  operate  Kaveman  is  a  web  browser  or  VNC  on  the  remote  client.  No 
additional  software  is  required.  And  no  software/users  licenses  help  keep  your  costs 
down. 

REMOTB-Y  CONTROL  POWER 

Through  the  user-friendly  Kaveman  GUI,  you  can  control  the  power  of  up  to  eight 
devices. 


AUTOMATICALLY  MONITOR  SERVER  ACTIVITY 

Kaveman  automatically  monitors  critical  server  vitals  such  as  power,  video,  and 
keyboard  response;  it  alerts  you  to  crashes  and  enables  you  to  quickly  respond  to 
problems. 


Remote  Client 


hi  b  u  b  m  b  n 


Servers 


I  G  I  “ 

The  Engine  of  Innovation 


Available  in  single  and  eight  channel  versions 


www.digitalv6.com 


Resellers  and  Distributors  Welcome 


Seeking  Solutions  ...NTI  Has  The  Answers! 

MULTI-USER 

SERVER 

CONTROL  IS  EASY! 

Individually  command  or  simultaneously 
share  up  to  32  USB-enabled  computers 
using  USB  keyboards  &  mice  and  VGA 

multiscan  monitors. 


“I  want  Matrix  KVM 
control  for  USB  computers.” 


I 

> 
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FREE  CATALOG! 


CALL  800*742-8324 


•  Compatible  with: 

-SUN  Blade  100,  1000, 

-  SUN  Ray  &  SUN  Fire*  280R 

-  USB-enabled  PCs 

-  MAC  G3/G4s 

-  HP  J5000  and  other  USB-enabled 
UNIX  computers 

•  Available  with  2,  4  or  8  user  ports. 

Controlling  USB  computers  is  easy 
with  NTI’s  Matrix  Control  Software 
with  a  GUI  Interface. 

•  Features  NTI’s  patented  true  electronic 
autoboot  USB  switching  -  boots  all 
attached  computers  in  one  operation. 
(Other  USB  KVM  switches  require 
individual,  sequential  boot-up.) 

•  Fully  compliant  with  USB  standards. 

•  Crisp  &  clear  1900x1200  resolution. 


1275  Danner  Drive  •  Aurora,  OH  44202 
330-562-7070  •  FAX:  330-562-1999 


KEEMUX  KVM  SOLUTIONS 


BUY  ONLINE  at  www.ntil.com/sn 
Email:  sales@nti1.com 


($ Cables 


Complete  Fiber  Optic 

Jumper  Cable  Solutions 

(lowest  Price  Guaranteed i 


fast  Turn  Around 

Same  Day  Shipping  -  Standard  items 
As  fast  as  48  hrs  -  Custom  Cables  ** 


0 


ustom  Configurations 

Any  Way  you  want ... 

SC,  ST,  LC,  MU,  and  MTRJ 
Multimode  and  Singlemode 
Duplex  and  Simplex 

uality  Assured 

Each  Jumper  individually  tested 
Test  results  included 


0  year  Warranty 


Be  Confident  with  our  Jumpers 


Os 


.00  Off  Online  Orders 

With  Coupon  NW72202 

Offer  good  on  Web  orders  only.  Offer  expires  1/31/03. 


'  See  Web  site  for  details 

“  Lead  times  may  vary  depending  on  product  and  quantity 


Ph:  (800)555-7176  WWW,gOCableS.COm  Fax;  (562$ 


|  tmdno*  ol  Sfabnl  Jftqnufclb  tny$oMof^  tif.  Afl  ath*  ’  - 


The  Hub  of  the  Network  Buy 


•  &  ,/t.  'TL  s 


TM 


Dancer/  FA 


Network  Flow  Analyzer 

•  An  Easy-To-Use  Network  Viewing  Tool 

•  Email  •  Database  *VoIP  *Web 

•  Identifies  Problems  Causing  Slow  Downs 

•  Monitors  Applications,  Network  Devices, 
and  Network  Traffic 

•  Affordable  I  kM 


free  Download! 

w.4ppDonc«;»m 


BEST  OF  INTEROP 

NETW’RLDINTEROP 

o 

cmp  Computing  INFORIUTIONWEEK  EE  TIMES 


Call  Toll  Free 
800.825.7563 


Dancer 


AppDancer  Networks,  Inc. 

1000  Holcomb  Woods  Parkway 
Suite  426 

Roswell,  CA  30076-2585  USA 

email  info@AppDancer.com 

telephone  770.643.6800  USA 
web  www.AppDancer.com 


OBSERVER 


Low  cost,  complete  RMON  monitoring  for  remote  sites  or 
segments. 

Software-only,  non-dedicated  data  collection. 

Pure,  full  RMON  1  and  2  support.  Complete  implementation  of 
both  RMON  1  and  2  for  Ethernet  (10/100)  and  Token  Ring  (4/16). 

Full  adherence  toRFCs  1513,  1757,  2021  and  2074. 

Runs  as  a  service  on  Windows  NT/2000/XP. 

Works  with  ANY  RMON  management  console  or  collection  facility 
(Observer  \  OpenView  \  Concord  ",  NetScout ",  etc.). 

Compatible  with  Network  Instruments'  optimized  ErrorTrack'u  NDIS 
drivers  display  true  errors-by-station. 

Multiple  concurrent  network  interface  monitoring  (up  to  10). 

Why  pay  thousands  more  for  the  same  data? 

Call  800-526-7919  for  information,  or  see  our  web  site  at: 


WWW. 


.com 


©  2001  Network  Instruments,  LLC  -  Corporate  Headquarters  (952)  932-9899  FAX  (952)  932-9545 
UK  and  Europe  +44  (0)  1959  569880  FAX  +44  (0)  1959  569881  info@networkinstruments.com  www.networkinstruments.con' 
Network  Instruments  and  the  “N"  logo  are  registered  trademarks  of  Network  Instruments.  LLC  Minneapolis,  MN  USA 
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...  protecting  and  organizing 
your  electronic  environment. 

2isapiiL3isJ=>w/s&  CtfU+w/  Cal* 


Call  1  866  TRY  GLCC  or  visit  us  at 


wyMUEffi  Mmm  ||  P.¥i 

Great 


Corporate  Headquarters: 

P.0.  Box  551,  Edinboro,  PA  16412 
Western  Distribution: 

3875  Corsair  St.,  Suite  “O' 

Reno,  NV  89502 


Securely  squash  junk  email,  viruses  and  pornography  without  the 
headache  of  integrating  new  software  or  hardware  into  your  current 
messaging  environment. 


Remove  the  frustration  of  constant  updates.  Get  control  over  email 
policy  configuration  and  enforcement. 

Find  out  about  a  free  trial  with  zero  risk  and  zero  integration  by  visiting 
us  at  www.mxlogic.com/nw  or  calling  877-MXLOGIC. 


Managed  Email  Firewall  Services 


SENSAPHONE;i 

IMS 


5-4DDD 


Sends 

SNMP 

Messages 


Monitors 

64 

IP  addresses 


Embedded 

Web 

Server 


Sends 

E-Mail 


Power 

Outage 

Alarming 


Internal 

UPS 


Power  Ethernet 
Control  Port 
Interface 


Internal  Voice, 
Modem 
&  Pager  Port 


8  R)-45  Sensor  Inputs 

(Temperature,  Humidity, 
Woter,  Motion,  Power, 
Smoke/Fire) 


Microphone 

for  Sound 
Monitoring 


BE  NOTIFIED  BEFORE  CRITICAL  EVENTS  TURN  INTO  DISASTER! 


•  Eight  environment  inputs 

•  Power  sensing 

•  Monitors  64  IP  addresses 

•  Send  alerts  to  64  people 

•  8  methods  of  contact 

•  Calendar  scheduling 

•  Expands  to  256  sensors 

•  Remote  power  control 

•  Optional  camera 


The  Sensaphone  IMS-4000  Infrastructure 
Monitoring  System  monitors  critical  environ¬ 
mental  and  network  elements  in  your  server 
room,  data  center,  or  telecomm  installation  and 
reports  to  you  instantly  when  events  threaten 
your  infrastructure.  The  IMS-4000  keeps  watch 
so  you  don't  have  to.  See  these  features  and 
more  on  the  web  at  www.ims-4000.com 


Cisco  Router 
and  Switch  Poster 


Buy  •  Sell  •  Lease  •  Repair  •  New  •  Refurbished  •  Used 

www.wdpi.com  •  877.231.2451  •  cisco@wdpi.com 

121  Cheshire  Lane,  Minnetonka,  MN  55305  U.S.A. 


Cisco 


Routers 


Switches 

Hubs 

Voice  Over  IP 

Memory 

Security 

Interface  Modules 
Port  Adapters 
Wireless 


World  Data  Products  introduces  its  new  Cisco 
Router  and  Switch  poster.  It  provides  at-a-glance 
information  on  model  capacities,  interface  cards 
and  available  features. 

The  Cisco  Poster  is  a 
valuable  tool  for 
network  planning. 

Call  877.231.2451  or 
visit  www.wdpi.com 
to  request  your 
FREE  Cisco  Router 
and  Switch  poster. 


®  i  I 


Avoid  Downtime 

Plan  ahead  and  protect  your  IT  operations 
from  heat  crippling  downtime 


Thousands  of  COOLITs  are 
currently  cooling  data/LAN 
rooms  around  the  clock 


AirPac 


COOLIT  2000  Series 


Plug  and  cool  -1 1 5  V. 


Portable  -  Compact  -  Self-Contained 


u 


Online  ordering 
next  day  shipping 


ADAPT 


“Your  Spot  Cooling  Specialist  " 


800-243-COOL 


www.CoolestSpot.com 


Contact  these  companies  today  to  help  you  with  your  training  needs! 


Learnkey  Inc.  ^ 

(800)  865-0165 
www.learnkey.com 
Self-paced  online  CD  network 
certification  developer  bus/apps 


Boson  Training  ^ 

(813)  925-0700 
www.bosontraining.com 
CCIE,  CCNP,  CSS1,  CCNA,  Cisco, 
wireless,  CISSP 


PMG  NctAnalyst 

(800)  645-8486 
www.NetworkTraining.com 
Network  Forensic  Analysis  and 
Security  Training  and  Services 


Transcender 

(615)  726-8779 
www.transcender.com 
Award-winning  practice  exams 
for  IT  certification 


■ — 


George  Washington  Untv 

(202)  973-1175 
www.cpd.gwu.edu 
Oracle  MCSE  Network  Security 
UNIX/LINUX  I-Net  VB.Net  XML 


WKMN  Training 

(415)  586-1713 
www.wkmn.com 
Comprehensive  introduction  to 
wireless  networking. 


IPexpert,  Inc. 

(866)  225-8064 
www.ipexpert.net 
CCIE,  CCNP,  CSS1,  CCNA,  Cisco, 
wireless,  CISSP 


CBT  Nuggets,  Inc. 

(541)  284-5522 
www.cbtnuggets.com 
IT  Certification  Videos 


To  Place  Your  Listin 
Call  Enku  Gubaie  at  (801 


NetSmart  Learning  Partner 


The  Hub  of  the  Network  Buy 
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\\<-  sell,  buy,  and  lease  the  best  new  and  refurbished  networking 
equipment  and  systems  at  the  lowest  prices  anywhere. 

Isn't  it  about  time  you  made  the  smart  choice? 


. 
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Trust  the  Experts , 


jftntinental 

COMPUTERS  «~.im 


We  Specialize  In... 


Cisci  Ststciii 


rhsMt^sn' 


d  i  g  i  t  a  I 


Authorized 

Reseller 

Ik  a  tmt  rmpmc 


COMPAQ. 

Alpha  SYSTEMS 


www.conticomp.com  •  310.416.1200 


(sf  View  Cart 


’®r  Clear  Cart 


FACTORY  DIRECT 
FIBER  OPTIC  PRODUCTS 

Jumpers,  Pigtails,  Termination  Boxes, 
Preconnectorized  Backbone  Cable, 
Mode  Conditioning  Cables, 
Kthernet  Converters  and  Switches. 
CAT5  Products,  Photonic  Devices 

www.fiberdyne.com 

/Ifiberdyne  LABS,  INC. 

l-(800)  894-9694 
(315)  895-8470 
Fax  (315)  895-8436 


We 


Sell 


CISCO 


New  &  Used 
Fully  Guaranteed 
Overnight  Delivery 


Se  habla  Espanol 
Wir  sprechen  Oeutsch 


800.451.3407 


90  Castilian  Drive.  Suite  110,  Santa  Barbara.  CA  93117 


Routers 
Switches 
Interface  Modules 
Access  Servers 
Accessories 


www.networkhardwarG.com 

BUY  ONLING 


LSI 


NGTWORK  HARDWARE  RESALE 


CISCO  NORTEL 


UP  TO  85%  OFF 

CURRENT  TECHNOLOGY 

NEW  •  REFURB  /  BUY  •  SELL 


THIS  MONTH'S  HOT  SPECIALS 

Passport  8648 TX  Enterprise  Routing  Switch  Module  (Refurbished) 

48  port  autosensing  10BASE-T/100BASE-TX  Ethernet  Layer  switching  interfaced 

Special  $4,800 

Cisco  2924-CXL  (Refurbished) 

22  Port  10/100  Ethernet  Switch  *  2  Ports  B-FX 

Special  $675 

While  Supplies  Last 

ASN2  Base  Unit  32  M  48V  Redundant  Power  (Refurbished) 

Special  $895 

16  MB  Nortel  Compatible  PCMCIA  Flash  Card 

Special  $225 

NLE  OFFERS  FREE  LIFETIME  TECHNICAL  SUPPORT 

SPECIALS  EXPIRE  12/13/02 

NORTEL 

NETWORKS 


aS  iSi  2  #  Ba^Networics. 


NATIONAL  LAN  EXCHANGE  •  WWW.NLE.COM 


888-8LANWAN 

Call  for  Free  Quote!  (888~852-6926) 


||^|  + 1  401 

OptimumDatalnc.  ^ax  +  ^  ^0 

www.optimumdata.com 


toll  free  800  879  8795 
ph:  +  1  402  575  3000 
fax:  +  1  402  575  20 1 1 


ip  20; 

Cisco  •  Paradyne  •  ADTRAN  •  Sun  •  Extreme  Networks 


r  SERVER  ROOM 

Temperature  ^ 
Sensors 


Multiple  Models  Including: 


THl-100 

(Battery  powered) 

THL-100  AC/ DC 

(Continuous  monitoring) 

THL-100  AC/DC  Plus 

(Email  alarms) 


►  Records  Temperature,  Humidity  &  Light 

►  Time  Stamped  Data  for  Detailed  Analysis 

►  Windows-based  SmartSensor  Software 
•  Data  or  graphical  view 

•Easily  exports  to  common  spreadsheet 
software 


Toll  Free  1-866-442-7767 
www.smartronix.com/products 


WRCA.NET 
NEW  USED 


WwitfMKta  Provide  of  Network  Herdaeie  Knee  198’ 


AUTHORIZED  RESELLER 
Access/Routers/Switches 
Cisco  Livingston  Ascend 
3Com  US  Robotics  Kentrox 
Adtran  BayNetworks  Xyplex 
Computone  Digital  Link 
Modems  /  DSU  /  Muxes 
IBM  UDS  Codex  Hayes  GDC 
Micom  Microcom  Paradyne 
ATT  MultiTech  Penril 
Racal  Telebit  Zoom 

WE  BUY  AND  SELL 
www.wrca.net 
800-699-9722 


Advertise  in  the 

Marketplace  and  watch  your  sales 
come  pouring;  in! 


Call  Direct  Response  Advertising 
1-800-622-1108 


its  a 

NO  brainerl 


m  Cisco  Systems  ■  Extreme  Networks  ■  Nortel  Networks 

■  Juniper  Networks  ■  Foundry  Networks  ■  Lucent  Technolog 
www.digitalwarehouse.com  .  Alcatel 


The  No.  1  Source  For  Used  Cisco  Direct*# 


Phone:  800-439-8558  or  718-894-7500 

56-29  56th  Drive,  Maspeth,  NY  1  1378  USA  Fax:  718-894-1573 


iruivu 

See  the  entire  Generation 
3.0  collection  at: 

BRETTS 

Luggage.  Leather  goods.  Gifts 
Pens.  Cltx:ks.  Lighters.  Games 


www.suitcase.com 


all  or  &nnotit,Ce 


Network  Products  &  Services  with 
Network  World  s  Marketplace  Call  800-622-1108  efl.  8507 


o 


careers.com 


IT  CAREERS 


o 


careers 


SYSTEMS  ANALYST  IV-For  co. 
specializing  in  mktg  &  mnfg  of 
computer  software;  responsible 
for  researching  changes  & 
enhancements  to  existing  features, 
product  install  processes,  tools, 
standards  &  processes  This 
includes  testing  and  verifying 
systems  &  database  modules  to 
ensure  their  quality  &  integrity. 
Train  employees  &  customers  on 
systems  usage.  Participate  in 
process  refinement  &  improve¬ 
ment.  Coordinate  activities  of 
various  depts  to  ensure  completion 
of  the  project  on  schedule. 
Req's:  B.S.  or  equiv.  based  on 
education  and/or  work  experience, 
with  concentration  in  Comp  Sci, 
Business  or  a  related  field;  5 
years  exp.  in  job  offered  or  5 
years  technical  exp.  in  supporting 
PC's,  mainframe  or  web  based 
environments.  Proficiency  in 
Java.  SQL  Server,  Microsoft  Visual 
J++,  Microsoft  Visual  Studio,  Select 
Enterprise.  Rational  Clear  Quest 
Rational  Clear  Case.  Microsoft 
Visio  PVCS  Defect  Tracker  &  Test 
Director.  40  hrs/wk.  Send  resume 
to  Siemens  Medical  Solutions, 
Human  Resources,  51  Valley 
Stream  Pkwy.,  Malvern,  PA  1 9355, 
FAX;  610-219-8266,  e-mail; 
human.resources@smed.com. 
EOE/AA 


Programmer.  8a-5p;  40  hrs/wk. 
Convert  data  from  project  specs; 
prep  detailed  workflow  chart 
for  input,  output  &  logical  opera¬ 
tions,  dsgn,  implmt  &  test  comp 
prgm  using  C,  Java2,  micro¬ 
processor  prgmg,  networks  & 
UNIX,  prep  tech'l  documentation. 
Educational  req:  Bach  or  equiv  in 
Comp  Sci  or  Engg,  Info  Systms, 
Electrical,  Electronics  or  related 
field  of  Engg.  1  yr  exp  in  job  offd 
or  as  S/ware  Engr/Systms/Prgmr 
Analyst.  Resume:  Nextgen 
Infotech,  Inc.,  2090  Beaver  Ruin 
Rd.,  Ste  600,  Norcross  GA 
30071 


Seeking  qualified  applicants  for 
the  following  positions  in  Memphis, 
TN:  Senior  Systems  Planning 
Analyst.  Serve  as  a  project/team 
leader.  Evaluate  systems  re¬ 
quirements  and  develop  system 
configurations  to  ensure  corporate 
objectives  are  met.  Plan,  design, 
analyze,  develop  and  implement 
computer  systems.  Requirements: 
Bachelor's  degree"  in  computer 
science,  MIS,  engineering,  applied 
science  or  related  field  plus  5 
years  of  experience  in  computer 
systems  development.  Experience 
with  Visual  Basic,  SQL  Server, 
MVS/TSO  mainframe  develop¬ 
ment/interfacing  with  server  ap¬ 
plications  also  required.  "Master's 
degree  in  appropriate  field  will 
offset  2  years  of  general  experi¬ 
ence.  Submit  resumes  to  Chris 
Gibney,  Federal  Express  Corpo¬ 
ration.  2600  Nonconnah,  Suite 
191.  Memphis,  TN  38132.  EOE 
M/F/D/V. 


♦ 


S/W  ENGR 

Anlyz,  dsgn,  dev,  code,  test  & 
implement  commercial  apps 
utilizing  knowledge  of  sys.  dev. 
life  cycle.  Dev.  dsgns  based  on 
specs.  Anlyz,  eval.  &  modify  ex¬ 
isting  or  proposed  sys.  Coord, 
w/users  to  ensure  efficient  & 
timely  delivery  of  sys.  BS  in 
Comp.  Sci.,  Engrg.,  Bus.  or 
Math  plus  3  yrs  exp.  in  either 
the  position  offered  or  as  Prog. 
Analyst,  Sys.  Analyst  or  S/W 
Cons.  rqd.  Must  have  exp. 
w/Windows  &  MVS/ESA  5.2.2 
operating  sys.;  COBOL  &  MVS 
/JCL  lang  ;  &  Oracle.  DB2  &  SQL 
Server  RDBMS.  High  mobility 
preferred.  40  hrs/wk.  8  am  -  5  pm, 
$60,980/yr.  Qualified  applicants 
report/submit  resume  to: 
Manager,  Westmoreland 
County  CareerLink,  300  East 
Hillis  St.,  Youngwood,  PA  1 5697- 
1808.  Refer  to  Job  Order  WEB 
284936. 


Sr.  Software  Engineer 

Design  and  development  of  re¬ 
ports.  functional  specifications, 
and  high  level  design  utilizing 
BRIO.  Must  have  Bachelors  De¬ 
gree  Computer  Science  or  Elec¬ 
tronics  or  in  a  related  field  &  3 
yrs.  exp.  or  3yrs.  exp.  in  a  related 
position  w/abitity  to  use:  Brio  Ad¬ 
ministrator,  Brio  Query  Design¬ 
er.  Brio  SQR  Report  Builder.  Brio 
One  Integrator,  DB2,  J2EE,  DB2, 
SQL  Server,  and  Cold  Fusion. 
Must  be  willing  to  travel  and  re¬ 
locate. 

40.0  hrs./wk  8:00  AM  -  6:00  PM 
$76,000/Yr. 

Applicants  send  cover  letter 
and  resume  to: 

Cyber  Korp,  Inc. 

400  West  Lake  Street 
Suite  216 

Roselle  IL  60172-3572 

Attn:  HR  MGR 


NuTech  Solutions,  Inc.,  an  inter¬ 
national  software  development 
consulting  company,  has  openings 
for  Senior  Software  Developers. 
The  qualified  candidate  will  be 
responsible  for  development  of 
software  products  and  business 
solutions  for  data  acquisition, 
data  mining,  optimization  and 
knowledge  management,  using 
computational  intelligence  knowl¬ 
edge  of  evolutionary  algorithm, 
etc.  Will  utilize  software  expertise 
in  system  integration,  object  ori¬ 
ented  design  and  development 
and  data  modeling.  Other  tech¬ 
nologies  that  are  key  to  this 
position  are:  Java,  C++,  Micro¬ 
soft  VisualStudio  and  Oracle. 
Minimum  requirements  are  a 
Masters  Degree  in  Computer 
Science  and  four  (4)  years  in 
design  and  development.  Please 
submit  your  resume  to  NuTech 
Solutions,  Inc.,  Attn:  V.  White, 
8401  University  Executive  Park, 
Charlotte,  NC  28262. 


Computer  Support  Spec.:  Smyrna, 
GA.  Provide  technical  support; 
maintain  commercial  credit  card 
information  system;  coordinate 
conversion  to  new  hardware  and 
software.  Req'd:  BS  (or  equiv. 
in  education  and/or  exp.)  in 
Comp.  Science  or  related  field. 
Resumes  to:  Yama  Enterprises, 
2086-B,  Cobb  Pkwy,  Smyrna, 
GA  30080. 


DATABASE  ADMINISTRATOR. 
Bachelor's  degree  or  foreign 
degree  equivalent  in  Computer 
Science,  Computer  Engineering, 
or  a  closely  related  field 
required.  Must  hold  three  years 
experience  in  database  admin¬ 
istration  using  Oracle  and  Oracle 
DRUMS  in  programming.  Work 
hours:  8  am  to  5  pm,  M-F.  Send 
resume  to  Leslie-America's 
Collectible  Network,  Inc.,  10001 
Kingston  Pike,  Suite  57, 
Knoxville,  TN  37922;  Attn:  Job 
Code  DAB. 


Computer/  Info.  Systems 

INFORMATION  SYSTEMS 
PROFESSIONALS 

To  participate  in  analysis,  problem 
solving,  project  design,  technical 
implementation  for  major  projects 
and  mentor  junior  level  consul¬ 
tants.  Participate  in  the  timely 
and  high  quality  delivery  of  prod¬ 
uct;  implementation,  integration, 
design,  coding,  testing  and  doc¬ 
umentation  of  custom  application 
software;  evaluate  user  require¬ 
ments  and  consult  with  design 
team  to  identify  current  procedures 
and  needs;  support  and  train 
end-users.  Technologies/Platforms 
used  include;  UNIX,  Windows 
NT,  SQL  Server,  or  Oracle  using 
SQL,  C/C++,  Visual  Basic,  Java, 
Cobol  and  other  appropriate 
programming  languages  in  Client 
/Server,  Network  and  Mainframe 
environments.  Must  have  a  Bach¬ 
elors  degree  or  its  equivalent, 
and  2+  yrs.  professional  experi¬ 
ence.  Send  resume  to:  Human 
Resources,  Knightsbridge  Solu¬ 
tions,  500  W.  Madison  Ave., 
Suite  3100,  Chicago.  IL  60661. 
EOE. 


Sys/Analysts  to  perform  embed¬ 
ded  systems  prog  using  VC++, 
COM,  DCOM,  CORBA,  WAP, 
Code  Warrior,  Assembly  lan¬ 
guage,  Linux  etc  for  hand  held 
PCs  and  PDAs;  develop  data¬ 
base  appls  using  Oracle,  MS 
SQL,  on  Windows/UNIX  OS;  test 
and  debug  appls  for  optimal  per¬ 
formance.  Require  BS  or  foreign 
equiv  in  CS  or  Engg  (any 
branch)  with  1  yr  exp  in  IT. 
High  Salary  f/t.  Travel  involved. 
Resumes  to  Salem  Associates, 
Inc.  405,  6th  Ave,  Ste  102,  Des 
Moines,  IA  50309. 


Senior  Programmer  Analyst 
needed  to  research,  design,  and 
develop  computer  software  sys¬ 
tems,  applying  principles  and 
techniques  of  computer  science, 
engineering,  science,  and  math¬ 
ematical  analysis,  using  the  fol¬ 
lowing  hardware/software:  IBM 
3090,  COBOL,  IMS  (DB/DC), 
JCL  and  others.  40  hrs/wk.  8am 
to  5pm.  $  57,450/year.  Requires 
Bachelor's  Degree  in  Computer 
Science  or  Engineering  and  1 
year  of  experience  in  the  job 
offered  or  as  Programmer/Pro¬ 
grammer  Analyst.  Employer  Paid 
Ad.  Send  resume  to  P.O.  Box 
11170,  Detroit,  Ml  48202-1170. 
Reference  No.  202495. 


Financial  Database  Analyst 
w/MS  in  Information  Systems. 
Will  apply  knowledge  of  database 
management  systems  &  perform 
full  life  cycle  system  implemen¬ 
tation  &  deployment.  Send  resume 
to:  HR  Dept.,  Metro  Bank,  9600 
Bellaire  Blvd.,  Suite  252,  Houston, 
TX  77036. 


Black  Belt  -  GEEP  IT 

Atlanta,  GA 

Who  we  are  GE  Power  Systems  is  the  world's  leading  supplier  of  power  systems 

equipment  and  services  with  global  annual  sales  of  over  $14  billion.  Our 
innovative  team  spirit  and  progressive  challenges  have  made  GE  Power 
Systems  an  environment  offering  exceptional  opportunities. 


Who  we  seek  The  Black  Belt  will  lead  the  implementation  of  medium  to  large  sized  IT 
projects  including  the  creation  of  a  data  warehouse  for  Parts  business  to 
streamline  business  reporting,  on-time  and  under  budget  to  meet 
customer  requirements  and  milestones;  work  with  functional  and 
technical  teams  to  select  vendors  for  implementing  a  robust  reporting 
environment  for  Parts  and  implement  solutions;  collaborate  with  GE 
Energy  Services  and  Power  Systems  Shared  Services  to  leverage  their 
Centers  of  Excellence  to  help  execute  different  phases  of  the  application 
development  life  cycle  for  the  data  warehouse  project;  partner  with  the 
business  quality  resources  to  build  quality  capable  processes  for  business 
reporting  and  for  selecting,  managing  &  distributing  Parts-IT  contract 
resources  using  quality  improvement  tools;  and  integrate  quality 
programs  to  create  a  seamless  interface  to  the  customer  by  facilitating 
optimum  system/application  performance,  identifying  and  utilizing 
any/all  digitization  opportunities  and  implementing  business 
intelligence  solutions 

The  Black  Belt  will  possess  a  BS  in  Information  Systems,  Computer 
Science,  Engineering  or  equivalent  plus  a  minimum  of  2  years 
experience  implementing  IT  projects.  The  Black  Bell  will  demonstrate 
the  ability  to  manage  multiple  projects  using  quality  improvement  tools; 
strong  situational  leadership;  and  project  risk  mitigating  skills.  Strong 
interpersonal,  presentation,  communication,  organization  and 
quantitative/analytical  skills  are  required 


How  to  apply 


We  offer  a  competitive  salary,  an  outstanding  benefits  package  and  the 
professional  advantages  of  an  environment  that  supports  your  development 
and  recognizes  your  achievements.  To  apply,  please  send  your  resume, 
referencing  code  GEPS/286963/AN030,  to:  op]>ortunities@gecareers.com. 
We  are  an  Equal  Opportunity  Employer 


GE  Power  Systems 


We  bring  good  things  to  life 


Senior  Project  Manager-Re¬ 
sponsible  for  running  projects 
of  three  to  five  ieam  members. 
Projects  must  be  completed  on 
time,  on  budget  and  to  quality 
standards.  Duties  include  setting 
and  managing  goals  and  priorities 
with  little  or  no  guidance.  Make 
professional  level  presentations 
to  clients  and  staff.  Manage  con¬ 
tracts  effectively  and  perform  risk 
assessment.  Assist  sales  and 
marketing  personnel  with  esti¬ 
mates  of  project  work  and  costs. 
Evaluate  business  requirement 
decisions.  Develop  accurate,  viable 
project  plans.  Evaluate  perfor¬ 
mance  and  write  and  conduct 
project  reviews  for  team  members. 
Requirements  include  a  Master's 
degree  or  equivalent  in  Computer 
Science,  Electrical  Engineering 
ora  related  field;  or  the  equivalent 
Bachelor's  degree  or  equivalent 
and  five  years  of  progressively 
responsible  experience  in  the  job 
offered  or  in  project  management 
and/or  software  development. 
Applicants  must  have  unrestricted 
authorization  to  work  in  the  United 
States.  Salary  $90, 000/year. 
40  hours/wk.  Respond  with 
two  copies  of  resume  to  Case 
#200112957,  Labor  Exchange 
Office,  19  Staniford  St.,  1st  FI., 
Boston,  MA  02114. 


IT  BUSINESS  ANALYST  III 

ADT  Security  Services,  Inc.  has 
an  immediate  opening  in  its 
Boca  Raton,  Florida  office  for  an 
IT  Business  Analyst  III. 

Responsible  for  gathering  and 
understanding  business  needs, 
and  for  developing  technical 
specifications  to  be  used  by  de¬ 
velopment  staff  to  address  those 
needs. 

Must  possess  at  least  a  bache¬ 
lor's  degree  or  its  equivalent  in 
Computer  Science,  Engineering 
or  a  related  field,  experience  as 
a  Management  Consultant/Project 
Manager/Lead,  and  experience 
with  decision  support  systems, 
multi-tier  computer  systems  and 
/or  multi-system  strategies,  busi¬ 
ness  processes  and  strategies, 
Oracle,  SQL-Server,  Sybase,  In¬ 
formatics,  Business  Objects, 
UNIX  and  Windows  NT. 

Resume  and/or  cover  letter  must 
reflect  each  requirement  above 
and  specify  reference  code 
ITBA/RJ  or  it  will  be  rejected. 

Forward  resume  to  Theresa 
Maia,  ADT,  One  Town  Center 
Road,  Boca  Raton,  FL  33486- 
1010. 


NuTech  Solutions,  Inc.,  an  inter¬ 
national  software  development 
consulting  company,  has  an 
opening  for  the  position  of  Vice 
President  of  Products.  The  qual¬ 
ified  candidate  will  lead  the 
design,  development  and  imple¬ 
mentation  of  mission  critical 
software  tools  and  application 
products  that  apply  computational 
intelligence  principles  (evolu¬ 
tionary  algorithms,  simulated 
annealing,  neural  networks, 
fuzzy  logic  and  hybrid  systems) 
to  business  process  optimization. 
Will  maintain  full  functional  re¬ 
sponsibility  for  the  activities  of 
team  including  selection  and 
hiring  of  programming  staff,  staff 
supervision  and  guidance,  de¬ 
velopment  of  project  specific 
goals  and  milestones,  imple¬ 
mentation  of  quality  standards 
and  procedures.  Will  represent 
the  company  at  trade  and  acad¬ 
emic  conferences.  Minimum  re¬ 
quirements  are  a  Masters  Degree 
in  Computer  Science  and  four 
(4)  years  development  experience 
designing  systems  that  apply 
computational  intelligence  prin¬ 
ciples  to  the  optimization  of  busi¬ 
ness  problems.  Must  be  fluent 
in  state-of-the  art  computational 
intelligence  area  and  technologies. 
Please  submit  your  resume  to 
NuTech  Solutions,  Inc.,  Attn:  V. 
White,  8401  University  Executive 
Park,  Charlotte,  NC  28262. 


Test  Validation  Engineer.  Develop 
&  implement  software  for  Auto¬ 
mated  Test  &  Measurement  sys¬ 
tems  to  test  design  validation  for 
Automobile  Steering  Columns  & 
related  components  using  Lab- 
VIEW  &  VB  for  programmable 
controllers.  PC  or  embedded 
controllers.  Design  electrical 
control  systems  for  Test  & 
Measurement  applications.  Run 
component  validation  tests  & 
prepare  test  result  reports. 
Reqd:  B.S.M.E.  &  5  yrs  exp. 
40  hrs/week,  9am-5pm.  Send 
resume  to  J.  Brigham,  HR  #A28, 
Onsite  Companies,  Inc.,  7301 
Parkway  Drive,  Hanover,  MD 
21076. 


Senior  Software  Engineer  with 
client-server  and  web  based 
applications  design  and  devel¬ 
opment  experience  to  work  out 
of  our  Dublin,  Ohio  office.  Send 
resume  to  Plante  &  Moran  LLP, 
Att:  HR  Mgr.  SSE-KT, 

3434  Granite  Circle,  Toledo, 
OH  43617-1160  or  on-line  to 
pamela.schell  @  plantemoran.com. 
EOE. 


Network  Administrator:  Install, 
configure,  &  support  company's 
local  area  network  (LAN),  wide 
area  network  (WAN),  &  Internet 
system.  Maintain  network  hard¬ 
ware/  software.  Monitor/  Maintain 
network,  Supervise  network  sup¬ 
port  &  client  server  specialists. 
Plan,  coordinate  &  implement 
network  security  measures.  Req: 
Master's  Deg.  in  info,  systems  + 
1  yr.  exp.  in  job  off.  Resume  to: 
Merchant  Investment,  1120 
Powers  Ferry  Rd.  Marietta.  GA 
30067 


Several  computer  related  posi¬ 
tions  available  for  international 
airline  teiecom  and  information 
services  company.  Degree,  tech¬ 
nical  skills  &  experience  vary  per 
position.  Send  resume  to 
Natasha  Lyttle,  SITA  INC,  3100 
Cumberland  Blvd.,  Ste  200, 
Atlanta,  GA  30339.  SITA  INC  is 
an  Equal  Opportunity  Employer. 


Programmer  Analyst:  Various 
locations  in  GA.  Analyze,  design, 
develop,  re-engineer,  and  imple¬ 
ment  commercial  software  appli¬ 
cations.  Req'd:  BS  in  Comp. 
Science,  Engineering,  or  related 
field, and  2  yrs  in  job  offered,  or  2 
yrs  as  a  Software  Consultant. 
Resumes  to:  Infoglaze  Systems, 
375  Central  Ave,  Ste  96,  Riverside,  I 
CA  92507. 
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iDial  Networks,  Inc.  a  Telecom¬ 
munication  Services  company 
based  in  The  Woodlands.  TX  re¬ 
quires: 

Vice  President  for 
Retail  Sales  &  Marketing: 

To  develop  sales  strategies  to 
market  virtual  phone  cards  and 
virtual  phone  accounts  nation¬ 
wide  as  well  as  overseas  Imple¬ 
ment  Agent  Program  and  estab¬ 
lish  distribution  channels. 
Manage  sales  team.  Negotiate 
rates  with  international  carriers 
from  Europe  and  Asia.  Needs  a 
Masters  degree  in  Economics  or 
relevant  field  and  4  years  rele¬ 
vant  experience  in  managing 
and  marketing  pc  based 
telecommunication  systems. 

Senior  Manager  Control  Center 

&  Web  Operations: 

To  be  responsible  for  all  e-com¬ 
merce  operations  and  to  manage 
and  develop  the  main  switching 
systems  for  web  based  call  trig¬ 
gering  telephony  projects  based 
on  Dialogic  and  Windows  2000 
platforms  and  Cisco  networking. 
Knowledge  of  Dialogic  platforms 
based  on  El  Signaling  method¬ 
ology  used  in  South  East  Asia 
and  Cisco  networking  is  essential. 
Needs  a  Bachelors  in  Electrical 
&  Electronics  Engineering  and  5 
years  relevant  experience  in  pc 
based  switching  systems. 


Database  Administrator  II.  Per¬ 
form  maintenance  &  backup 
functions  for  Oracle  d/base. 
Resolve  issues  of  moderate 
scope  by  reviewing  &  analyzing 
identifiable  factors.  Refer  more 
complex  issues  to  senior  staff. 
Collaborate  w/end  users  by  con¬ 
ducting  needs  analysis.  Dvlp  & 
implmt  d/base  dsgn  &  modeling. 
Conduct  testing  of  systms  to 
ensure  efficiency  &  accuracy. 
May  manage  security  access  & 
control  to  specific  debase,  ensuring 
only  authorized  staff  has  access 
&  updating  capabilities.  Collabo¬ 
rate  w/end  users  in  dsgng  & 
generating  reports  &  serving  as 
tech'l  expert.  Ensure  data  re¬ 
ported  is  user-friendly  &  under¬ 
standable.  Dvlp  &  update  docu¬ 
ments  pertaining  to  systm  or 
s/ware  procedures,  reqmts,  & 
changes.  B.S.  in  Comp.  Sci.  or 
related  field  +2  yrs  exp  in  job  offd 
or  related  occupation  such  as 
S/ware  Engr  or  similar  duties 
under  different  job  title.  2  yrs  exp 
w/Oracle  d/base  admin,  RMAN, 
Unix  Shell  Scripting,  Humming 
Bird  Exceed.  IBM  AIX  (RS  6000 
series).  &  MS  NT  4.0  Oracle 
Certified  Profl  certification  reqd. 
40  hrs/wk.  $65K/yr.  Must  have 
proof  of  legal  auth  to  work  in 
US.  Send  your  resume  to  IA 
Workforce  Center,  215  Watson 
Powell  Jr.  Way,  Ste  100,  Des 
Moines,  IA  50309-1727.  Please 
ref  to  JO  #1101637.  Employer 
paid  ad. 


Smithfield  Foods,  Inc.  has 
an  opening  for  a  Distribution 
Systems  Analyst.  The  qualified 
candidate  will  ensure  proper 
configuration  and  operation  of  all 
computer  related  equipment  used 
in  the  warehouse,  coordinate 
system  upgrades  and  mainte¬ 
nance  with  warehouse  operations, 
will  analyze  requirements  and 
design,  develop  and  maintain  in¬ 
terfaces,  maintain  servers  and 
systems  reports,  and  support  ex¬ 
isting  systems.  Responsibilities 
will  also  encompass  development 
and  implementation  of  new  and 
existing  applications  and  data 
conversion  processes.  Minimum 
requirements  are  a  Bachelors 
Degree  in  Computer  Science 
and  2  years  of  experience  in 
systems  analysis,  program  design 
and  development,  applications 
implementation  and  support  or  4 
years  of  professional  experience 
in  systems  analysis,  program 
design  and  development,  appli¬ 
cations  implementation  and 
support.  Submit  resume  to 
Smithfield  Packing,  Inc.,  Attn: 
Human  Resources.  200  Com¬ 
merce  Street,  Smithfield,  VA 
23430. 


Sr.  Database  Developer  -  Design 
/implement  databases  on  SQL 
Server  2000;  Knowledge  of  object 
oriented  database  design  a 
must;  Write  Transact-SQL  &  DTS 
scnpts  to  Port  database  objects: 
Write  triggers/  stored  proc.  in 
Transact-SQL;  Understand  b/z 
process.  /  translate  req.  to  SQL 
interactions  with  databases:  Un¬ 
derstand  LDAP  database  structure 
&  write  queries  to  transform  it  to 
a  normalized  database  structure; 
Write  WSH  scripts  to  import  IIS 
logs  to  Webtrends;  knowledge  of 
Webtrends  Database  Structure; 
Must  have  worked  on  SQL  2000 
SQL-XML  functionality;  Familiar 
with  Full  Text  Searching/  MS 
Indexing  Service;  develop  in- 
house  applications  (ASP,  COM, 
Javascript)  for  user  interfaces; 
conversant  with  Rational  Rose 
Data  Model;  Experience  on 
Rational  Unified  Process  a  must; 
BS  in  Comp.  Sci.  +  3  yrs.  exp. 
(Software  Dev.,  &  SQL  Server 
Database  Design  &  Admin.)  + 
Microsoft  Certificate  in  SQL 
Server.  Apply  to  Firstdoor  1 425 
Ellsworth  Industrial  Drive,  #  31, 
Atlanta.  GA  30318  with  proof  of 
work  authorization. 


ALGORITHMS  ENGINEER- 
Millimetrix  Broadband  Networks, 
a  leading  provider  of  broadband 
wireless  technology,  seeks  qual¬ 
ified  applicants  for  the  position  of 
Algorithms  Engineer.  Will  perform 
specialized  research  for  new  mil¬ 
limeter  wave  products  (18  to  38 
GHz),  including  theoretical  mod¬ 
eling  and  simulations  for  High 
Gain  Channel  Coding,  Cross  Polar 
Interference  Cancellation,  Syn¬ 
chronization  and  Phase  Locked 
Loops.  Will  provide  technical 
support  for  existing  products  and 
product  upgrades.  Requres  MS 
in  Elect.Eng.  and  4+  years  expe¬ 
rience  in  research  and  develop¬ 
ment  for  broadband  applications 
(physical  layer).  Should  have 
expertise  in  Linux-C++  and  Mat- 
lab.  Send  resume,  referencing 
job  code  7-02,  to:  Millimetrix, 
attn:  Director  of  HR,  2325  Dulles 
Corner  Blvd.  #470,  Herndon, VA 
20171;  fax:  (703)  871-7302;  or 
e-mail:  hr_us@millimetrix.com. 
EOE. 


Programmer  Analyst  wanted  to 
research,  design,  and  develop 
computer  software  systems,  ap¬ 
plying  principles  and  techniques 
of  computer  science,  engineering, 
science,  and  mathematical  analy¬ 
sis,  using  the  following  operating 
systems:  MS-DOS,  Windows, 
UNIX,  and  the  following  computer 
languages:  COBOL,  DB2,  IMS, 
CICS;  Modify  system  to  address 
any  concerns  by  client  and  doc¬ 
ument  and  test  system.  40  hrs. 
/week.  8am  to  5pm.  $  59,448 
/year.  Must  possess  Bachelor's 
Degree  in  Engineering  or  Com¬ 
puter  Science  and  six  months 
of  training  in  multi-user  pro¬ 
gramming.  Employer  Paid  Ad. 
Please  send  resumes  to  MCDC 
/ESA,  P.O.  Box  11170,  Detroit, 
Ml  48202-1 170.  Reference  No. 
202226. 


Western  Union,  a  Division  of 
First  Data  Corporation,  a  co.  in 
Greenwood  Village,  CO  special¬ 
izing  in  e-commerce  transaction 
payment  services,  has  an  opening 
for  a  Sr.  Application  Architect  to 
work  in  Montvale,  NJ  &  other 
unanticipated  job  sites  in  the 
U.S.  Analyze  complex  internal 
business  functions  and  processes 
to  design,  develop,  code  and  im¬ 
plement  financial  software  appli¬ 
cations.  Requires  bachelors 
degree  in  computer  science;  2 
yrs.  exp.  as  a  project  manager  or 
leader;  working  knowledge  of 
TANDEM  K  and  S  Series  hard¬ 
ware  and  Guardian  90  operating 
system.  Respond  by  resume  to 
Norm  Barnett,  First  Data  Corpo¬ 
ration,  6200  S.  Quebec  St., 
Greenwood  Village,  CO  801 1 1 
and  refer  to  job  #3368NA. 


SOFTWARE  CONSULTANT 

Analyze  &  evaluate  existing  or 
proposed  software  systems.  Dsgn. 
dvlp,  implmnt  &  improve  programs, 
systems  &  related  procedures  to 
rocess  data  using  in-depth 
nowledge  of  the  software 
dvlpmnt  hfe  cycle  &  C/C++  pro¬ 
gramming  languages.  Encode, 
test,  debug  &  install  operating 
programs  &  other  system  software 
utilizing  exp  with  Inges  &  SQL 
server.  Bachelor's  (or  equiv.)  in 
Comp.  Sd„  Math,  Bus.  or  Engnmg 
+  2  yrs  exp.  in  position  offered  or 
as  a  Programmer  Analyst.  Software 
Engineer  or  Systems  Analyst 
reqd,  Exp.  must  include:  (a)  C  or 
C++  programming  languages;  and 
(b)  Ingres  or  SQL  server.  High 
mobility  preferred.  40  hrs/wk,  OT 
as  reqd.  8  am  -  5  pm,  $61 ,000/yr. 
Qualified  applicants  please  submit 
resume  to  Manager,  Washington 
County  Team  PA  CareerLink, 
Millcraft  Center,  Suite  1 50LL,  90 
West  Chestnut  Street  Washington, 
PA  15301-4517.  Please  referto 
Job  Order  No.  WEB  279724 


SOFTWARE  CONSULTANT 

Analyze  &  evaluate  existing  or 
proposed  software  systems.  Dsgn, 
dvlp,  implmnt  &  improve  programs, 
systems  &  related  procedures  to 
process  data  using  in-depth  know¬ 
ledge  of  the  software  dvlpmnt  life 
cycle.  Encodes,  tests,  debugs  & 
installs  operating  programs  & 
other  system  software  utilizing  IBM 
operating  systems,  CICS/COBOL 
languages  &  DB2.  Bachelor's  (or 
equiv.)  in  Comp.  Sci.,  Math,  Bus., 
Engnrng  or  Comp.  Info.  Sys.  +  2 
yrs  exp.  in  position  offered  or  as 
a  Programmer  Analyst,  Software 
Engineer  or  Systems  Analyst 
reqd.  Exp.  must  include  (a)  IBM 
operating  sys.,  (b)  CICS  &  COBOL 
languages,  and  (c)  DB2  database. 
High  mobility  preferred.  40  hrs 
/ wk,  OT  as  reqd,  8  am  -  5  pm, 
$61,000/yr.  Qualified  applicants 
please  submit  resume  to  Manag¬ 
er,  Washington  County  Team  PA 
CareerLink,  Millcraft  Center,  Suite 
1 50LL,  90  West  Chestnut  Street, 
Washington,  PA  15301-4517. 
Please  refer  to  Job  Order  No. 
WEB280334. 


Software  Engineer -Orefield,  PA. 
Require  experience  in  design 
and  development  of  applications 
using  VisionPlus,  COGEN, 
COBOL,  CICS,  VSAM  and  JCL. 
Relocation  within  USA  possible. 
Attractive  compensation  package. 
Send  resume  to  Mahalingam  N 
Narayanan,  Gurus  IT  Services, 
1117  Linden  Hollow  Lane, 
Orefield,  PA  1 8069.  Email  resume 
to :  resume@gurusit.com. 


Java  Programmer 

Design,  development,  &  testing 
of  GUI  screens,  using  Java, 
Mysql,  JDBC.  Raise  &  resolve  is¬ 
sues  by  working  w/team  mem¬ 
bers.  M.S.  in  CS  or  rel.  w/abil.  to 
use  Java,  Mysql,  JDBC, 
PL/SQL,  VBScript,  HTML,  JSP, 
CGI,  LINUX,  Informix,  Oracle. 
40.0  hr/wk.  9-5  Send  resume  to 
Mr.  Ray  Little,  Vice  President, 
MediSYS.  7201  Halcyon  Summit 
Dr.,  Montgomery,  AL  36117 


Senior  Analyst  needed  w/exp  to: 
analyze, design, develop,  test  & 
support  software  applications 
using  Clarify,  Oracle,  Tuxedo, 
Visual  Basic,  Windows,  AS/400, 
RPG/400,  CL/400;  Actuate  & 
Impromptu.  Implement  software 
applications  on  Windows  opera¬ 
tions  systems  &  AS/400  operat¬ 
ing  systems.  Send  resumes 
to:  informationtechnology© 
konica.com 


Software  Design  Engineer,  Cary, 
NC:  Perform  s/ware  requirements 
analysis,  review,  design,  imple¬ 
mentation  &  testing  for  electronic 
laboratory  test  equipment.  Develop 
instrument  monitoring  &  control 
s/ware  on  Windows  NT  using 
Visual  C++,  MFC,  COM.  DCOM, 
ATL,  OLE-DB.  ODBC.  SQL 
Server,  MS  Access,  RS232, 
TCP/IP.  Perform  GUI  &  RDBMS 
design.  Maintain  firmware  in 
Assembler,  C  &  VHDL  for  Intel 
8051  series.  Evaluate  interfaces 
betw.  h/ware  &  s/ware.  Assist 
w/h/ware  design  analysis.  Manage 
version  control  of  software.  Req: 
Bachelors  in  Electronic  Engi¬ 
neering/Computer  Science  + 
5  yrs  in  job  or  as  Software 
Engineer-Electronic  Systems 
design.  Mail  resume  to:  HR, 
Varian,  Inc.  13000  Weston 
Pkwy,  Cary,  NC  27513 


Computer  Hardware  Technician 
sought  by  computer  repair, 
upgrade  and  sales  company  in 
Lakewood,  CO.  Install,  modify,  and 
make  minor  repairs  to  computer 
hardware  systems  and  peripheral 
units  including  fax  machines, 
printers,  and  scanners.  Provide 
technical  assistance  and  training 
to  system  users.  Install  hardware 
and  peripheral  components  on 
users'  premises,  following  design 
and  installation  specifications. 
Enter  commands  and  observe 
system  functions  to  verify  correct 
system  operation.  Requires  4 
years  of  experience  installing, 
modifying,  and  repairing  computer 
hardware  and  peripheral  systems 
such  as  fax  machines,  printers 
and  scanners.  M-F,  8am-5pm, 
$39,760/yr.  Respond  by  resume 
to  Employment  Programs,  PO 
Box  46547,  Denver,  CO  80202 
and  refer  to  JON  CO  5031401 . 


Software  Eng.  sought  by  Co.  that 
develops  comp.-based  physio¬ 
logical  systems  analysis  software. 
Must  have  Masters  in  Comp. 
Sci.,  Biomed.  or  Elec.  Engg., 
Applied  Math,  or  Num.  Analysis 
+  1  yr.  exp.  in  building  3D  comp, 
models  of  physiological  systems. 
Req:  C++,  Java,  comp,  control 
langs.  Response  to  H.R./J.X. 
Physiome  Sciences,  Inc.,  150 
College  Rd.  W.,  Suite  300, 
Princeton,  NJ  08540-6604. 
EOE. 


COMPUTER  SYSTEMS  ANA- 
LYST-oversee  front-end  systems 
design  by  applying  knowledge  of 
JAVA,  accounting  &  database 
systems  in  development  of  app- 
plications;  Implement  custom 
user  interface.  Min.  req:  4  yrs 
exp.  Resumes:  Cautus  Networks 
Corp.,  1333  S.  Miami  Ave.,  Ste 
303,  Miami,  FL  33130. 


Software  Engineer,  Nashua,  NH. 
Research,  design  &  dev.  comp 
softw.  sys,  in  con)unction  w/hard- 
ware  prodt  devpnt.  Consult  w/ 
hardware  ena'rs  &  eng  staff  to 
evaluate  interface  b/wn  hardware 
&  soft.,  &  operat’  I  &  performance 
req'ts  of  overall  sys.  Provide  tech, 
guidance  on  client  projects.  Will  use 
Win  NT/95,  200(5,  PB.  Sybase, 
Oracle,  Visual  Basic,  C++,  UNIX, 
FORTRAN,  SQL  Server,  Visual 
Interdev,  ASP,  Java  Script,  IIS, 
MTS,  Access,  XML,  Java.  Bach's  in 
CS,  Math,  Eng  or  MIS  plus  5yrs 
as  systems  analyst/prog  analyst, 
Will  accept  Mast's  +  2yrs  exp  as  a 
prog,  anal/syst.  anal.  Req.  $  85,000 
/hr,  40hrs/wk,  9:00am  to  6:00pm. 
Pis.  send  2  copies  of  resume/letters 
of  appl’n  to:  Job  Order  #  2002- 
433,  PO  Box  989,  Concord,  NH 
03302-0989 


Sr.  Systems  Analyst  for  b/z 
analysis,  software  development 
using  Java.  Visual  Basic.  Java 
Script,  SQL.  HTML  ASP,  Rational 
Rose  UML,  EJB,  Ant.  &  Clear 
Case  on  Windows,  Windows  NT 
&  Sun  OS.  Perform  system  inte¬ 
gration  functions  including  IBM 
/DB2  projects.  Configure  Web 
Sphere.  iPlanet  &  Siebel.  Develop 
Ant  Scripts  for  data  migration  / 
deployment.  Maintain  documen¬ 
tation  and  tech,  assist,  /support. 
BS  in  Electronics  Engineering 
or  Comp.  Sci.  +  3  yr.  Exp.  in  Soft¬ 
ware  design,  development,  &  im¬ 
plement.  for  b/z  apps.  +  Sun  or 
Microsoft  Certificate  in  Program¬ 
ming.  Comp.  Salary.  Apply:  Net- 
serv,  6580  Jimmy  Carter  Blvd.. 
Norcross,  GA  30071  with  work 
authzn.  proof. 


MindTree  Consulting,  an  expand¬ 
ing  IT  consulting  company  offering 
product  realization  services  to 
Internet  infrastructure  and  device 
vendors,  is  searching  for  qualified 
IT  professionals  to  join  its  grow¬ 
ing  team.  Presently,  we  have 
positions  for  Network  Adminis¬ 
trators  and  Software  Consultants. 
Experience  with  Cisco  Router, 
Compaq  servers.  Implemented 
Checkpoint  network  security  fire¬ 
walls,  Rational  Rose,  iPlanet 
Webserver,  Sun  Microsystem's 
J2EE  architecture  desired.  Qual¬ 
ified  applicants  will  have  a  bach¬ 
elor's  degree  in  a  relevant  field 
and  qualifying  industry  experi¬ 
ence.  Positions  may  require 
relocation  to  various  client  sites 
throughout  the  United  States. 
Qualified  applicants  submit 
resumes  to  HR  Department,  The 
Tower  at  270  Davidson  Avenue, 
Suite  305,  Somerset,  NJ  08873. 


Oracle  Developer/Database  Ad- 
ministrator-IT  Co.  in  Lawrence- 
ville,  NJ  needs  Database  Ad¬ 
ministrator  to  dsgn  d/base 
models  using  Designer  2000, 
Erwin  Tools,  write  d/base  creation 
scripts  &  perform  d/base  admin, 
maintenance  &  monitoring.  Will 
also  build  &  maintain  critical 
feeder  process  for  d/bases  & 
write  high  level  dsgn  &  low  level 
dsgn  documents.  BS  in  Elec¬ 
tronics  or  Comp  Engg  w/3yrs 
exp  reqd.  Prevailing  wage, 
9a-5p.  M-F.  Contact  HR  Dept  at 
609-912-0666  or  fax  resume  to 
609-912-0605. 


PROG.  ANALYST 

Hexaware  Technologies,  Inc.  is 
currently  seeking  a  Programmer 
Analyst  who  holds  at  least  a  B.S. 
in  Comp.  Sci.,  Engrg.,  Business 
or  Math  &  has  one  yr.  exp.  as  a 
Prog.  Analyst,  S/W  Engr,  S/W 
Consultant  or  Sys.  Analyst.  Must 
have  exp.  w/Live  Commerce  3.0, 
Gentran  Server,  EDI  (ANSI  & 
EDIFACT),  UNIX  &  SQL  Server. 
Must  also  hold  Microsoft  Visual 
Basic  certification.  Resume  only 
to:  Rajendran  Ravindran,  Director 
-HR,  4343  Commerce  Ct.,  Ste. 
618,  Lisle.  IL  60532. 


Kama  Consulting  Inc. 

TOP  SS  s,  W2  or  1099 

We  are  a  fast  growing 
Consulting  company  based 
in  New  Jersey. 
Excellent  opportunities  for 
Programmers, 

Systems  Analysts,  DBAs. 

Sun  Solaris  System  Admins, 
Natural,  Powerbuilder, 
ADABAS,  ORACLE,  SYBASE, 
PROGRESS,  COBOL 
TCP/IP,  Delphi/VB,  Windows  NT 

Send  your  resume  to 
Rod  McFadden 
Kama  Consulting 
Fax:201-934-7166 
Email:Kamaco@aol.com 


S/W  Engineers  to  analyze,  design, 
develop  and  implement  CRM. 
client/server,  web  appls  using 
Java.  Clarify  suite.  VB.  PB. 
Sybase,  Oracle,  PL/SQL,  MS 
Access  on  Windows,  Unix.  Sun 
Solaris  OS;  interact  with  users, 
obtain  user  requirements,  conduct 
system  analysis,  performance 
tuning;  test  and  troubleshoot  project 
appls;  train  end  users/team 
members.  Require:  MS  or  foreign 
equiv  in  CS/Engg  (any  branch) 
with  1  yr  exp  in  IT.  Competitive 
salary,  f/t  Travel  involved  Resume 
to:  HR.  ABZ  Consulting,  Inc. 
3140  Briarcliff  Road.  Suite  A. 
Atlanta,  GA  30329 


Cedar  Enterprise  Solutions,  Inc.,  a 
software  consulting  and  services 
organization  has  an  opening  for 
VP-Content  Value  Management 
Technology.  The  ideal  candidate 
will  be  responsible  for  manage¬ 
ment  consultancy  encompassing 
sales  and  marketing,  account 
development  for  the  U.S.  and 
Canada  including  strategic  de¬ 
velopment  and  new  alliances 
and  product  development  for 
new  IT  technology.  Minimum 
requirements  are  a  Bachelors 
Degree  in  Marketing  and  4  years 
experience  in  marketing/sales 
manager  positions  or  6  years 
experience  in  marketing/sales 
manager  positions.  Please  submit 
your  resume  to:  Cedar  Enterprise 
Solutions,  lnc./HR,  100  East 
Pratt  Street,  Baltimore,  MD 
21202. 


dET2S 

Network  Service  Solution* 

NET2S  is  a  leading  International 
Consulting  and  Engineering  firm 
specializing  in  communications 
technologies.  We  are  presently 
seeking  to  fill  the  following  posi¬ 
tions: 

•  Sr.  Tibco  (RV,  Integration  Mgr) 
Developer 

•  TIBCO/TRIARCH  Systems 
Engineer 

•  Sr.  Security  Systems  Engineer 
All  positions  require  BS/MS 
degree  with  a  minimum  of  2  to  3 
years  of  experience  in  the  field. 
Must  possess  excellent  commu¬ 
nication  skills  as  well. 

NET2S,  82  Wall  Street  Suite  400, 
New  York,  NY  10005;  Fax:  (212) 
279- 1 960;  Phone  (21 2)  279-6565; 
or  Email:  jQbus-ny@net2s.com 
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Become  a  Microsoft  Windows  2000  Security  Expert. 

It's  easy.  Just  point,  click  and  choose  the  format  that  works  best  for  you: 
•CD-ROm  •UJeb-Based  •Hands-On  •Uirtual  Classroom 

Uisit  lletSmart  today  at  unuui.nwnetsmart.com 
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ONLINE  SERVICES 

Alonna  Doucette,  Vice  President,  Online  Development 

Hillary  Freeley,  Director,  Online  Operations 

Adam  Gaffin,  Executive  Editor,  Online 

Melissa  Shaw,  Managing  Editor,  Online 

Jason  Meserve,  Multimedia  Editor 

Sheryl  Hodge,  Online  Copy  Chief 

Christopher  Cormier,  Web  Producer 

CUSTOMER  ACCESS  GROUP 

Alonna  Doucette,  Vice  President,  Online  Development 
Hillary  Freeley,  Director,  Online  Operations 
Deborah  Vozikis,  Design  Manager  Online 
Mike  Guerin,  Senior  Production  Specialist 
Sharon  Sterns,  Manager  Client  Services 
INFORMATION  SYSTEMS 

W.  Michael  Draper,  V.  P.  Systems  4  Technology 
Anne  Nickinello,  Director  of  New  Media  Services 
Tom  Kroon,  Senior  Software  Engineer/Architect 
William  Zhang,  Senior  Software  Engineer 
Rocco  Bortone,  Senior  Network  Manager 
Peter  Hebenstreit,  Network  Specialist 
Kevin  O'Keefe,  Systems  Support  Manager 
Brian  Wood,  Senior  Systems  Support  Specialist 
Puneet  Narang,  Manager  of  DatabaseTechnologies 
Pam  Gertsios,  Database  Specialist 


■  IDG 

PlMck  J.  ■eBanri,  Chairman  of  the  Board 

HI  (Mealy,  CEO 

Network  World  is  a  publication  of  IDG,  the  world's  largest 
publisher  of  computer-related  information  and  the  leading 
global  provider  of  information  services  on  information  tech¬ 
nology.  IDG  publishes  over  275  computer  publications  in  75 
countries.  Ninety  million  people  read  one  or  more  IDG  publi 
cations  each  month.  Network  World  contributes  to  the  IDG 
News  Service,  offering  the  latest  on  domestic  and  interna¬ 
tional  computer  news. 


Sales  Offices 


Carol  Lasker.  Associate  Publlsher/Vic©  President 
JaneWeissman,  Sales  Operations  Coordinator 
Internet:  clasker,  jweissman@nww.com 
(508)  460-3333/FAX:  (503)  46 

New  York/New  Jersey 

1  Tom  Davis.  Associate  Publisher.  Eastern  Regie 
Elisa  Della  Rocco.  Regional  Sales  Manager 
Aimee  Jacobs.  Sales  Associate 
Internet:  tdavis,  elisas,  ajacobs@nww  com 
(201)  587-0090/FAX:  (201)  712-9786 


Northeast 

Donna  Pomponi,  Regional  Sales  Manager 
Caitlin  Horgan,  Sales  Assistant 
Internet:  dpomponi,  chorgan@nww.com 
(508)  460-3333/FAX:  (508)  460-1237 

Mid-Atlantic 

Jacqui  DiBianca,  Regional  Sales  Manager 
Marta  Hagan.  Sales  Assistant 
Internet:  jdibian,  mhagan@nww.com 
(610)  971-1530/FAX:  (610)  975-0837 

Midwest/Maryland 

Eric  Danetz,  Regional  Manager 
Aimee  Jacobs.  Sales  Associate 
Internet:  edanetz,  ajacobs@nww.com 
(201)  587-0090/FAX:  (201)  712-9786 

Central 

Dan  Gentile,  Midwest  Regional  Director 

Grade  Vela,  Sales  Assistant 

Internet:  dgentile,  gvela@nww.com 

(512)  249-2200/FAX:  (512)  249-2202 _ 

Northern  California 

Sandra  Kupiec,  Associate  Publisher,  Western  Region 
Miles  Dennison,  Regional  Sales  Manager 
SeanWeglage,  Regional  Manager 
Teri  Whitehair,  Office  Manager/Exec.  Asst. 

Berit  Einsiedl,  Sales  Assistant 

Internet:  skupiec,  mdennison,  sweglage,  twhitehair 

beinsiedl@nww.com 

(650)  577-2700/FA X :  (650)  34 1  -6183 

Northwest/Rockies 

Karen  Wilde,  Regional  Sales  Manager 
Lara  Greenberg,  Regional  Sales  Manager 
Kim  Gaffrey,  District  Manager 
Berit  Einsiedl,  Sales  Assistant 

Internet:  kwilde,  Igreenberg,  kgaffrey,  beinsiedl@nww.ee 
(650)  577-2700/FAX:  (650)  341-6183 

Southwest 

Becky  Bogart  Randell,  Senior  District  Manager 
Angela  Norton,  Sales  Assistant 
Internet:  branded,  anorton@nww.com 
(949)  250-3006/FAX:  (949)  833-2857 _ 


Southeast 

Don  Seay,  Regional  Sales  Manager 

Caitlin  Horgan,  Sales  Assistant 

Internet:  dseay,  chorgan@nww.com 

(404)  845-2886/FAX:  (404)  250-1646 _ 

Customer  Access  Group 

1  Tom  Davis,  Assoc.  Publisher  Eastern  Region/General 
Manager,  Customer  Access  Group 
Shaun  Budka,  Director,  Customer  Access  Group 
Kim  Gaffrey,  Sales  Manager,  Western  Region 
Kate  Zinn,  Sales  Manager,  Eastern  Region 
Sharon  Sterns,  Manager  Client  Services 
Caitlin  Horgan,  Sales  Assistant 
Internet:  tdavis,  sbudka,  kgaffrey,  kzinn,  ssterns, 
chorgan@nww.com 

(508)  460-3333/FAX:  (508)  460-1237 _ 


Fusion 

Alonna  Doucette,  Vice  President  Online  Development 
James  Kalbach,  Director,  of  Online  Sales 
Stephanie  Gutierrez,  Online  Account  Manager 
Debbie  Lovell,  Online  Account  Manager 
Kristin  Baker,  Sales  Operations  Manager 
Internet:  adoucette,  jkalbach,  sgutierrez,  dlovell, 
kbaker@nww.com 

(610)  341-6025/FAX:  (610)  971-0557 _ 


MARKETPLACE 

Response  Card  Decks/MarketPlace 

Richard  Black,  Director  of  Marketplace 
Karima  Zannotti,  Senior  Account  Manager 
Enku  Gubaie,  Senior  Account  Manager 
Amie  Gaston,  Account  Manager 
Chris  Gibney,  Sales  Operations  Coordinator 
Internet:  rblack,  kzannott,  egubaie,  agaston, 
cgibney@nww.com 
(508)  460-3333/FAX:  (508)  460-1192 

IT  CAREERS 

VP/General  Manager,  Janis  Crowley,  East  Regional  Manager. 
Deanne  Holzer,  Midwest/West  Regional  Manager,  Laura 
Wilkinson,  Operations  Director,  Donna  Kent,  Advertising 
Coordinator,  Leilani  Lopez,  Sales  Support, Tina  Silveira,  Sales 
Support.  Nikki  Wilson  (800)  762-2977/FAX:  (650)  286-2770 
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BackSpin 


Mark  Gibbs 


Dealing  with 


Last  week  I  talked  about  how 
not  paying  attention  to  details 
has  affected  Emusic.  But 
Emusic  is  not  alone.  Getting  the 
details  right  is  hard.  Unfortunately, 
you  don’t  have  a  choice  —  at  least, 
if  you  want  to  stay  in  business. 

The  problem  of  dealing  with  details  arises  when  a 
project  starts  and  people  say  “Oh,  we’ll  work  out  the 
details  later." This  statement  must  rank  as  one  of  the 
most  dangerous  assumptions  that  can  be  made  in 
business. 

It  is  like  saying  that  you’re  going  to  climb  to  the 
top  of  Mount  Everest  as  you  actually  start  the 
climb.  By  the  time  you’re  high  up  enough  to  know 
you  need  oxygen,  it  is  a  little  too  late  to  get  your 
hands  on  any. 

In  business,  much  the  same  problem  applies.  How 
many  times  have  you  started  a  project  working  from 
“the  big  picture”  (top  down)  with  the  intention  (real¬ 
ly  a  belief  more  akin  to  religious  faith  than  an  actual 
plan)  to  map  out  those  niggling  details  later? 

One  place  we  all  know  that  the  “top  down  leave 
the  details  for  later”  approach  just  doesn’t  work  is  in 
software  engineering. 

We’ve  all  heard  the  stories  of  software  projects 
that  bit  the  big  one  because  of  some  stupid,  little 
system  issues  that  should  have  been  nailed  down 


details 


before  coding.  Given  that  wealth  of  negative  expe¬ 
rience,  you’d  think  that  such  snafus  would  be  a 
thing  of  the  past. 

No  such  luck.The  industry  hears  every  month  of 
another  CRM  or  ERP  project  that  has  tanked 
because  it  was  out  of  control.  Occasionally  random 
bad  luck  is  involved,  but  not  usually 

Usually  the  problem  lies  in  the  assumptions.“Ah,” 
someone  says, “we’ll  use  X,”  where  X  is  a  process  or 
component  or  something  that  does  something  you 
want.  And  under  normal  conditions  X  is  great.  But  as 
it  turns  out,  under  other  conditions,  X  becomes  the 
source  of  catastrophic  failure. 

Let  me  give  you  an  example:  A  financial  company 
was  very  concerned  about  the  availability  and  secu¬ 
rity  of  its  data  and  so  located  its  back-up  data  center 
in  Phoenix  (no  earthquakes  and  no  flooding  —  the 
latter  had  caused  the  company  a  problem  with  its 
first  data  center). 

It  leased  the  sixth  floor  in  a  new  building,  in¬ 
stalled  an  air  conditioned,  lights-out  computer 
room  and,  to  suppress  radio  emission, “caged” 
the  room. The  company  had  a  back-up  generator, 
fire  suppression  system  and  multiple  data  lines. 
What  could  go  wrong?  Well,  the  water  tank  on  the 
roof  burst. 

Several  thousand  gallons  of  water  percolated 
through  the  building’s  structure,  and  because  the 


computer  suite  was  caged,  filled  it  up  to  a  depth  of 
a  couple  of  feet. 

And,  of  course,  this  happened  at  night.  Had  a  fire 
started,  the  smoke  alarms  would  have  raised  a  warn¬ 
ing,  but  the  company  didn’t  have  flood  alarms  — 
who'd  need  those  on  the  sixth  floor? 

Now  the  more  generous  of  you  might  say, “Come 
on,  Gibbs,  that  was  a  1000-to-l  chance!  Who  could 
have  foreseen  it?”  Sorry,  but  being  hit  by  a  meteor 
is  a  1000-to-l  chance;  being  flooded  on  the  sixth 
floor  should  have  been  considered. 

The  details  are  what  get  you  every  time  and  are 
generally  what  make  IT’s  job  so  damn  hard.  It’s  the 
little  details  that  define  the  true  cost  of  IT  operations. 
Some  you  deal  with  as  they  emerge  because  the 
world  changes,  but  others  should  be  planned  for  if 
you’re  any  good  at  your  job. 

When  it  comes  to  projects,  that  million-dollar  bud¬ 
get  is  great  for  getting  off  the  ground,  but  the  details 
that  emerge  from  lack  of  forward  thinking  will  cost 
you  half  that  again  or  more. 

The  devil,  and  hell,  is  definitely  in  the  details.  So 
the  next  time  someone  in  your  IT  group  says  “Oh, 
we  ll  work  out  the  details  later/ tell  ’em  about  the 
flood  on  the  sixth  floor. 

Send  a  tsunami  of  comments  to  backspin@gibbs 

.com. 


uzz  News,  insights,  opinions  and  oddities 


By  Paul  McNamara 

Pity  the  poor  telemarketer? 

When  Buzz  first  chatted  with  Gryphon  Networks 
CEO  Keith  Fotta  a  year  ago  it  was  easy  to  see  how 
his  company  was  positioned  for  success.  Gryphon 
sells  a  network-based  service  that  lets  telemarketing 
companies  comply  with  a  mushrooming  roster  of 
state-maintained  do-not-call  lists. 

A  year  later,  six  more  states  have  passed  such  laws 
-  32  now  have  them  —  and  bills  are  pending  in  all  18  others.  Only  a  legislator  look¬ 
ing  for  a  career  change  would  dare  oppose  such  popular  consumer  protection,  and 
with  enforcement  agencies  levying  millions  of  dollars  worth  of  fines,  only  a  foolish 
telemarketer  would  continue  to  dial  without  using  a  service  such  a  Gryphon's. 

Sounds  like  a  winning  business  model,  all  right. 

However,  what  wasn't  apparent  during  our  initial  conversation  —  not  to  Buzz,  at 
least  —  was  how  easily  Gryphon  might  fall  victim  to  the  same  antipathy  toward 
telemarketing  that  spawned  the  company.  Fotta  set  me  straight  on  the  stakes 
recently  while  explaining  why  he  opposes  an  effort  by  the  Federal  Trade  Commission 
to  establish  a  national  do-not-call  list. 

“Consumers  are  not  going  to  benefit  from  having  a  national  list,”  says  Fotta,  who 
cites  redundancy  and  the  federal  government's  limited  enforcement  resources 
among  a  litany  of  objections.  “The  real  scary  thing  that  I’m  most  afraid  of  for  the 
telemarketing  industry  is  that  if  the  national  list  gets  passed  they're  talking  about  it 
being  free  to  consumers.  [Some  states  charge  a  small  fee;  others  are  free.]  That  will 
collapse  the  telemarketing  industry,  and  I'll  tell  you  why." 

Please  do. 

“In  states  where  there’s  any  kind  of  fee,  7%  to  10%  of  consumer  households  will 
sign  up.  in  states  that  are  free,  50%  or  more  will  sign  up,"  he  says. 


What’s  wrong  with  more  people  signing  up? 

"The  telemarketing  industry  disappears,"  he  says. 

Again,  what's  wrong  with  that? 

“I'll  tell  you:  The  Direct  Marketing  Association  [DMA]  releases  numbers  that  say 
there  was  $661  billion  in  revenue  generated  last  year  by  the  telemarketing  industry, 
which  employs  6  million  people.  The  thing  they  don’t  tell  you  is  that  the  big  financial 
services  companies  aren't  considered  part  of  the  DMA.  If  you  put  Wall  Street  — 
every  bank,  every  brokerage  firm,  every  insurance  company  —  on  it,  the  number 
goes  to  10  million  people  that  generated  over  a  trillion  dollars  for  the  U.S.  economy, 
which  is  12%  of  the  gross  domestic  product.  That’s  not  something  you  want  to  screw 
around  with  going  into  a  recession  and  a  potential  war,”  Fotta  says. 

So  you're  telling  me  that  we  want  to  set  up  a  system  that  by  its  nature  limits  par¬ 
ticipation  to  10% ?  Why  would  we  want  to  do  that? 

“No,  what  we’re  doing  is  putting  a  responsible  mechanism  in  place  where  people 
who  want  to  sign  up  for  do-not-call  lists  have  to  have  some  skin  in  the  game." 

Fotta  also  says  that  consumers  should  have  to  renew  their  do-not-call  request 
periodically,  say  every  two  or  three  years,  to  ensure  that  numbers  do  not  remain  off- 
limits  to  telemarketers  long  after  their  owners  have  moved. 

He  does  not  believe  in  soft-pedaling  the  hyperbole. 

“You  take  telemarketing  away  and  there’s  no  Wall  Street,"  he  says. 

In  other  words,  all  that  stands  between  modern  life  and  a  return  to  an  agrarian 
society  is  the  noble  telemarketer. 

On  one  level  —  a  very  shallow  level  —  he's  right  about  the  fees:  It's  hard  to  argue 
that  protection  from  telemarketers  is  truly  important  to  an  individual  who  won't 
cough  up  a  couple  of  bucks  per  year. 

But  overall,  his  argument  is  self-serving  bunkum.  Even  cheapskates  should  be  enti¬ 
tled  to  a  little  peace  and  quiet  at  dinnertime  without  having  to  jump  through  hoops. 

Reaching  me  couldn't  be  easier. The  address  is  buzz@nww.com. 
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fANYWARE-  The  downside:  your  walk  through  the  parking  lot  was  long.  The  upside:  it  gave  you  time 
to  think  about  a  way  to  eliminate  the  high  cost  and  hassles  of  overnight  delivery. 

And  lo  and  behold,  you  found  it:  Canon  imageRUNNER™  technology.  It  lets  you  send  documents  anywhere,  in  any  form,  at  any  time, 
over  your  network  or  the  Internet.  Instantaneously.  Just  scan  a  document  into  the  imageRUNNER  and  send  it -to  desktops.  E-mail 
addresses,  fax  machines,  databases  and  file  servers.  All  of  which  results  in  lowered  costs  and  increased  productivity.  So,  take  pride. 
Thanks  to  Canon  know-how,  your  walk  through  the  parking  lot  is  considerably  shorter.  1 -866-25-CANON  www.imagerunner.com 

Canon  is  a  registered  trademark  and  IMAGERUNNER  and  Canon  Know  How  are  trademarks  of  Canon  Inc.  IMAGEANYYVARE  is  a  service  mark  of  Canon  U.SA.  Inc.  ©2002  Canon  W.SA.  Inc. 


Canon  KNOW  HOW 


Foundry  is  the  10-Gigabit  Ethernet  leader.  We  were  first  in  the  market  in  October  2001. 
and  we  continue  to  dominate  lOGbE  market  share.  Why?  Because  we  offer  a  complete  high 
performance  solution  from  wiring  closet,  server  farm,  to  backbone.  Our  solutions  are  easy  to  deploy, 
and  future  proof:  our  modular  switches  are  lOCibE  ready  without  a  forklift  upgrade. They’re  com¬ 
prehensive:  supporting  standard-based  replaceable  lOGbE  optics  with  distance  up  to  40  km. They  add 
value  beyond  bandwidth:  our  JetScope'VsFlow  technology  allows  you  to  monitor  network  traffic, 
on  every  port,  without  performance  degradations.  And  they  are  proven  in  real-world  networks 
University  of  Southern  California,' Walter  Reed  U.S.  Army  Medical  Center,  London  and  Amsterdam 
Internet  Exchanges, as  well  as  NTT/ Verio. Want  to  experience  10-Gigabit  Ethernet?  Follow  the  leader 
(  Contact  Foundry  today  at  1 .888.TURBOLAN  or  www.foundrynetworks.com/ 1  OGbE 


The  Power  of  Performance 
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